|
Hi Vern, Thanks! The network guy on the other end has checked the router's log and there's nothing. He also has it configured to allow ping, at least until we get this working. Netgear has very detail instructions with screen shots and everything, which is where the terminology problems come into play. The path goes something like this: W2K PC LinkSys Internet Cisco router Netgear iSeries The IP Security policy configuration talks about the source and destination, and tunnelling endpoints. The source and destination appear to be internal LAN IP addresses, and the tunnelling endpoints are internet IP addresses. Which I guess makes sense -- the VPN tunnel ends at the Netgear on one end, and the LinkSys on the other end. Although actually, I think it ends with the W2K PC on my end, but that doesn't have an internet IP address. As you say, frustrating. I think I'll go look for the SSH Sentinel software. I take it it uses IPsec? Peter Dow Dow Software Services, Inc. 909 793-9050 voice 909 793-4480 fax 909 522-3214 cell ----- Original Message ----- From: "Vern Hamberg" > I don't know NetGear - we use a LinkSys VPN router. Usually there's a log > on the router, probably accessible through a browser. > > Setting up a W2K or XP IP Security policy is one of the worst, most > frustrating exercises I know of. If you don't click on all the right > circles and squares and other arcane weirdness, nothing works. You might > also go to LinkSys' site and find the downloads for their VPN router - that > manual has an extensive section on setting this up. When I follow every > step very carefully, sometimes it works. :-( > > But when I have set one up, getting the 'Negotiating...' statuses is normal > for the first attempt--it's how I establish the connection--then the next > attempts at connecting (FTP, NetServer, etc.) should work without comment. > Try a telnet in a command prompt after your ping. Also, see if the router > is set up not to respond to ping. This will not stop the VPN connection but > may confuse you when you get no other response. > > If that does not work, you maybe should review your policy setup, maybe > remove the one you have and start over. But check the log on the router, if > you can. > > I much prefer a separate client - I use SSH Sentinel - don't know if you > can find a freely-usable copy anymore - it is quite stable and easy to set up. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.521 / Virus Database: 319 - Release Date: 9/26/2003
As an Amazon Associate we earn from qualifying purchases.
This mailing list archive is Copyright 1997-2024 by midrange.com and David Gibbs as a compilation work. Use of the archive is restricted to research of a business or technical nature. Any other uses are prohibited. Full details are available on our policy page. If you have questions about this, please contact [javascript protected email address].
Operating expenses for this site are earned using the Amazon Associate program and Google Adsense.