ISAKMP from local lan

[Mannheim]

Hi all,

i have a client that needs to connect to a VPN Gateway located at internet.

i am not able to get any connection.

wireshark wont get any answer from the vpn gateway.

protocol : isakmp

could anyone tell me what to configure on den appliance that the connection comes up.

thx
uwe

[Erik]

You simply need to open ports 500/udp and 4500/udp from your local net to the internet.
When you are experienced in using wireshark you may try to dump the packets on the external interface of the firewall to see if there is an answer from your server (I suppose there will be none):

Code: Alles auswählen

# tcpdump -i eth0 -nnp port 500 or port 4500

[Mannheim]

Hi Eric,

i opend the Service Group VPN,Predefined.
Includes NAT-T (4500/UDP) and 500/UDP

With wireshark on the VPN Client Machine i can see a request from the Client bit no reply.
192.168.100.102 ---------> w.x.y.z (official IP) SYN #

no answer returns

so i have to trace @ the internet line.
Could you tell me how to trace this issue on the box?

what is your native language?

kind regards
Uwe

[Erik]

Wir können auch deutsch schreiben. Da sind wir ja flexibel :P

Wie ich oben schon schrieb:
als root einloggen und dann

Code: Alles auswählen

# tcpdump -i eth0 -nnp port 500 or port 4500

Sind da auch nur Pakete in eine Richtung sichtbar, ist der Server der böse Bube