RE: [Users] ssh sentinel could not connect between linksys befsr41 to freeswan with nat-t

From: Rifath Nawaz <rifath(at)rifhome.homelinux.com>
Date: Mon Mar 31 2003 - 18:19:09 EST

hi

thanks for the info. i did upgrade the latest firmware, but still no luck. when i start the diagnostice on phase 2 exchanging certificates it just get hangs.

regards
rifath

-----Original Message-----
From: Tim Bouwer [mailto:TBouwer@pfn.com] Sent: Monday, March 31, 2003 7:27 AM
To: Rifath Nawaz
Subject: RE: [Users] ssh sentinel could not connect between linksys befsr41 to freeswan with nat-t

Hi

In addition to disabling ipsec passthrough: We had a linksys which required that we download and install the latest firmware release from their site before it behaved transparently with regards to ipsec.

regards
Tim

-----Original Message-----
From: Rifath Nawaz [mailto:rifath@rifhome.homelinux.com] Sent: Sunday, March 30, 2003 1:27 AM
To: Ken Bantoft
Cc: users@lists.freeswan.org
Subject: RE: [Users] ssh sentinel could not connect between linksys befsr41 to freeswan with nat-t

hi

i did disable ipsec passthrough. but still the same problem.

Rifath

-----Original Message-----
From: Ken Bantoft [mailto:ken@freeswan.ca] Sent: Sunday, March 30, 2003 1:00 AM
To: Rifath Nawaz
Cc: users@lists.freeswan.org
Subject: Re: [Users] ssh sentinel could not connect between linksys befsr41 to freeswan with nat-t

-----BEGIN PGP SIGNED MESSAGE----- Disable IPSec Passthrough on the Linksys, as the log says:

> Mar 18 18:29:42 vpnsrv pluto[5096]: "sentinel"[17] 67.68.89.10 #31:
Warning: peer is NATed but source port is
> still udp/500. Ipsec-passthrough NAT device suspected -- NAT-T may not
work.
> Mar 18 18:30:47 vpnsrv pluto[5096]: "sentinel"[17] 67.68.89.10 #32:
Warning: peer is NATed but source port is
> still udp/500. Ipsec-passthrough NAT device suspected -- NAT-T may not
work.

• -- Ken Bantoft The Unoffical FreeS/WAN Site: ken(at)freeswan.ca http://www.freeswan.ca PGP Key: finger ken@bantoft.org Sendmail may be safely run set-user-id to root.
  • Eric Allman, "Sendmail Installation Guide

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQCVAwUBPoaHzliWUusaxGxpAQG2JwP/SYCKN4r3P1yNx4TnACupDvyRq4AduIR8 Dih05V3SOIpyAgUpE0f0dkKSbecOh9TauQ0g27VUU2vGEPCBKSA2cP7g0tpH+H8x p9d//ZKYgdxLcDhOH5hx4zDqhZRegjhwxKUTxWXUIFle0G4WHH6KrSKE33bkv3Kg j4XMcQEHiEw=
=eFIJ
-----END PGP SIGNATURE-----

---

Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

---

sfs-users mailing list
sfs-users@lists.freeswan.ca
http://lists.freeswan.ca/mailman/listinfo/sfs-users Sponsored by Astaro - http://www.astaro.com

---

Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users Received on Thu Apr 3 21:18:00 2003