[ previous ] [ next ] [ threads ]
 From:  =?iso-8859-1?Q?Ronni_J=F8rgensen?= <rhj underscore mail at rhj dot dk>
 To:  "'Falcor'" <falcor at netassassin dot com>
 Cc:  <m0n0wall at lists dot m0n0 dot ch>
 Subject:  SV: [m0n0wall] VPN ipsec m0n0 to m0n0
 Date:  Sat, 20 Mar 2004 19:22:15 +0100
I have forwarded all ports/esp (AH donít work behind NAT!)!!

-----Oprindelig meddelelse-----
Fra: Falcor [mailto:falcor at netassassin dot com] 
Sendt: 20. marts 2004 16:50
Til: Ronni Jorgensen
Cc: m0n0wall at lists dot m0n0 dot ch
Emne: Re: [m0n0wall] VPN ipsec m0n0 to m0n0

you need to forward ESP to the m0n0wall.  UDP/TCP/ICMP are not needed as the
tunnel will be negociated and established over ESP.  (You can change this to
AH if you want to.)

Ronni Jorgensen wrote:

>Hi all
>I have 2 m0n0walls, one with a static IP on the WAN port, and a secound 
>m0n0 bihind a NAT router (also a static IP!) 
>-ROUT ER---
>I have forwardet all ports udp/tcp/icmp to the m0n0wall's WAN ip
>But when I configured a Ipsec connection betwin the 2 m0n0walls it's 
>going bad! On the m0n0wall behind the NAT I get:
>åØåracoon: ERROR: isakmp.c:1776:isakmp_chkph1there(): phase2 
>negotiation failed due to time up waiting for phase1. ESP 
>- in the logfile. And i not the wan ip! So how can I get it 
>I olso have triede to change the the interface (åØåSelect the interface 
>for the local endpoint of this tunnel.) in the ipsec, to my LAN, but 
>then the logfile i changing to> (my lan ip)
>Please help!

To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch