Ich arbeite in einem lokalen Netzwerk hinter einem ASG 7.104 und muss VPN Verbindungen zu verschiedenen Routern aufbauen. Wenn ich eine VPN-Client Verbindung zu einer ASG aufbaue, funktioniert alles. Nur die Verbindung zu einem AllNet 1294VPN Router klappt nicht, hier ein Trace vom Verbindungsaufbau:
-----------------------------------------------------------------
No. Time Source Destination Protocol Info
1 0.000000 10.90.100.81 10.90.100.1 DNS Standard query A bva.dynalias.net
2 0.059542 10.90.100.1 10.90.100.81 DNS Standard query response A 84.132.158.97
3 0.178442 10.90.100.81 84.132.158.97 TCP 1953 > pptp [SYN] Seq=0 Len=0 MSS=1460
4 0.265897 84.132.158.97 10.90.100.81 TCP pptp > 1953 [SYN, ACK] Seq=0 Ack=1 Win=3072 Len=0 MSS=1410
5 0.265995 10.90.100.81 84.132.158.97 PPTP Start-Control-Connection-Request
6 0.357783 84.132.158.97 10.90.100.81 TCP pptp > 1953 [ACK] Seq=1 Ack=157 Win=2916 Len=0
7 0.359697 84.132.158.97 10.90.100.81 TCP [TCP Window Update] pptp > 1953 [ACK] Seq=1 Ack=157 Win=3072 Len=0
8 0.364834 84.132.158.97 10.90.100.81 PPTP Start-Control-Connection-Reply
9 0.364934 10.90.100.81 84.132.158.97 PPTP Outgoing-Call-Request
10 0.457335 84.132.158.97 10.90.100.81 TCP pptp > 1953 [ACK] Seq=157 Ack=325 Win=2904 Len=0
11 0.459989 84.132.158.97 10.90.100.81 TCP [TCP Window Update] pptp > 1953 [ACK] Seq=157 Ack=325 Win=3072 Len=0
12 0.463233 84.132.158.97 10.90.100.81 PPTP Outgoing-Call-Reply
13 1.033708 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
14 2.233118 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
15 4.632933 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
16 9.432999 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
18 19.034594 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
29 38.231500 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
125 58.229133 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
126 60.268768 10.90.100.81 84.132.158.97 PPTP Echo-Request
127 60.363602 84.132.158.97 10.90.100.81 TCP pptp > 1953 [ACK] Seq=189 Ack=341 Win=3072 Len=0
128 78.228772 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
132 98.227607 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
136 118.228642 84.132.158.97 10.90.100.81 PPTP [TCP Retransmission] Outgoing-Call-Reply
137 120.275068 10.90.100.81 84.132.158.97 PPTP Echo-Request
138 120.365735 84.132.158.97 10.90.100.81 TCP pptp > 1953 [ACK] Seq=209 Ack=357 Win=3072 Len=0
139 120.430894 10.90.100.81 84.132.158.97 PPTP Stop-Control-Connection-Request
140 120.458342 10.90.100.81 10.90.100.1 DNS Standard query A bva.dynalias.net
141 120.518064 10.90.100.1 10.90.100.81 DNS Standard query response A 84.132.158.97
142 120.520192 84.132.158.97 10.90.100.81 TCP pptp > 1953 [ACK] Seq=209 Ack=373 Win=3072 Len=0
143 120.528443 10.90.100.81 84.132.158.97 TCP 1953 > pptp [FIN, ACK] Seq=373 Ack=157 Win=65379 Len=0
144 121.627028 10.90.100.81 84.132.158.97 TCP 1953 > pptp [FIN, ACK] Seq=373 Ack=157 Win=65379 Len=0
145 123.830257 10.90.100.81 84.132.158.97 TCP 1953 > pptp [FIN, ACK] Seq=373 Ack=157 Win=65379 Len=0
-----------------------------------------------------------------
Hat jemans schon ein ähnliches Problem gehabt und gelöst?
Kann ich sein, dass ich noch einen Filter für den Protokollwechsel nach der Verbindungsanfrage erstellen muss, un wie sollte der aussehen?
Danke für jede Antwort
Peter
This thread was automatically locked due to age.
Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.