Sophos UTM: Decommissioning of obsolete URL categorization services CFFS. Click here for important info.

Thread Info
  • State Not Answered
  • Replies 10 replies
  • Subscribers 0 subscribers
  • Views 6961 views
  • Users 0 members are here
Options
Suggested

VPN IP Sec - Remote Access

zeus1976
Hallo together,

I configured the ipsec remote access as follows: 

[SIZE="1"]Interface: WAN
Local Network:  LAN (Network) 
Virtual Pool: VPN Pool (IPSec) 
Policy: AES-256
Authentication Type: X509 certificate
Automatique firewall: active[/SIZE]

I tried to connect with several IP SEC Client (Greenbow and NCP) and I get always the same error mgs:

[SIZE="1"]2012:09:08-20:29:30 homesite Pluto[3594]: packet from 77.156.222.155:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-00]
2012:09:08-20:29:30 homesite pluto[3594]: packet from 77.156.222.155:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-02_n]
2012:09:08-20:29:30 homesite pluto[3594]: packet from 77.156.222.155:500: ignoring Vendor ID payload [draft-ietf-ipsec-nat-t-ike-03]
2012:09:08-20:29:30 homesite pluto[3594]: packet from 77.156.222.155:500: ignoring Vendor ID payload [RFC 3947]
2012:09:08-20:29:30 homesite pluto[3594]: packet from 77.156.222.155:500: received Vendor ID payload [Dead Peer Detection]
2012:09:08-20:29:30 homesite pluto[3594]: packet from 77.156.222.155:500: initial Main Mode message received on 21.12.18.145:500 but no connection has been authorized with policy=PUBKEY[/SIZE]

Do you know this error msg? How can I solve this probleme?

Thank for your help.

Best regards
Parents
  • 0
    The only thing I can see is that you should try enabling NAT-T.

    I expect that it still won't work, so we should look at the settings in the client.  If they're all OK, then the last thing I can think of before re-installing and starting over with a new configuration would be deleting the user and creating a new one so that we have a new certificate.

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    The only thing I can see is that you should try enabling NAT-T.

    I expect that it still won't work, so we should look at the settings in the client.  If they're all OK, then the last thing I can think of before re-installing and starting over with a new configuration would be deleting the user and creating a new one so that we have a new certificate.

    Cheers - Bob


    Thank you for your answer. Unfortuntly it doesn't work with NAT-T. I tried this to but it doesn't work. Have I to upgrade to V9? Would be solve this problem?

    Thank you for your feedback.
Reply
  • 0 in reply to BAlfson
    The only thing I can see is that you should try enabling NAT-T.

    I expect that it still won't work, so we should look at the settings in the client.  If they're all OK, then the last thing I can think of before re-installing and starting over with a new configuration would be deleting the user and creating a new one so that we have a new certificate.

    Cheers - Bob


    Thank you for your answer. Unfortuntly it doesn't work with NAT-T. I tried this to but it doesn't work. Have I to upgrade to V9? Would be solve this problem?

    Thank you for your feedback.
Children
No Data
Unfiltered HTML