Astaro User Bulletin Board
Go Back   Astaro User Bulletin Board > Astaro Gateway Products > VPN: Site to Site and Remote Access

Welcome to the Astaro User Bulletin Board.
If this is your first visit, be sure to check out the FAQ by clicking the link above. You may have to register before you can post: click the register link above to proceed. To start viewing messages, select the forum that you want to visit from the selection below.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 11-11-2009, 06:14 AM
Junior Member
 
Join Date: Aug 2009
Posts: 24
Question ipsec vpn ip pool range problem

hi,

I'm trying to get remote access via IPSec setup and working. The link is successfully establish.The issue is the ip pool that was given to the remote user which is different to the default astaro ipsec vpn ip pool.
ipsec vpn ip pool = 10.242.4.0/0
ip pool that was given = 192.168.254.0/0

Using ASC_latest.
here is the logs .

11/11/2009 1:42:34 PM IpSrcRange=[10.136.0.212-10.136.0.212],IpDstRange=[10.136.0.0-10.136.0.255],IpProt=0,SrcPortRange=[0-65535],DstPortRange=[0-65535]
11/11/2009 1:42:34 PMIPSec: connected: LifeDuration in Seconds = 2520 and in KiloBytes = 0
11/11/2009 1:42:34 PMIPSec: Connected to REF_IaBiXNPyaj on channel 1.
11/11/2009 1:42:34 PMPPP(Ipcp): connected to REF_IaBiXNPyaj with IP Address: 192.168.254.002. : 192.168.254.003.
11/11/2009 1:42:34 PMSUCCESS: IpSec connection ready
11/11/2009 1:42:43 PMSUCCESS: Link -> <REF_IaBiXNPyaj> IP address assigned to IP stack - link is operational.

any suggestions ? any help is much appreciated?

thanks
Reply With Quote
  #2 (permalink)  
Old 11-12-2009, 01:17 AM
Moderator
 
Join Date: Jul 2001
Location: southern California
Posts: 5,116
Default

Hi, which version of Astaro, and what VPN client and OS are used?

Barry
__________________
http://DealBert.net
Home & business end-user since v1.x
  • ASL 6.3x, HP DL145 Dual Opteron, 1GB RAM, 6 gigE NICs, 50-IP Platinum License
  • ASL 7.3x, Dell PE1550 Dual PIII 1GHz, 1GB RAM, 2 NICs, 50-IP Platinum License
  • ASL 7.5x, 17-watt fanless mini-ITX system: MSI IM-945GSE-A Atom n270, 2GB RAM, Morex T3310 case. 2 Intel GigE, 3 VLANs. 80G 5200rpm 2.5" HD
    Netgear GS108T gigE VLAN switch & Linksys WRT54G WAP
    Total network infrastructure: 27 watts. 100-IP Home User. FiOS 10mb/2mb
Reply With Quote
  #3 (permalink)  
Old 11-12-2009, 09:25 AM
Junior Member
 
Join Date: Aug 2009
Posts: 24
Default

hi,

asg 220, firmware 7.501 using the ASC_latest and windows xp pro.

I dont have any idea where this 192.168.254.0 came from.


thanks
Reply With Quote
  #4 (permalink)  
Old 02-09-2010, 10:37 AM
Junior Member
 
Join Date: Nov 2007
Posts: 21
Default

I to am experiencing this issue
Reply With Quote
  #5 (permalink)  
Old 02-24-2010, 09:59 AM
Moderator
 
Join Date: Nov 2007
Location: Karlsruhe, Germany
Posts: 82
Default

The static RAS IP can currently only be assigned with x509 IPsec remote access connections. If PSK is used the IP the client proposes is accepted whatever it is.

This will change in the upcoming ASG V8 where we'll support IP pools as with the other remote access methods.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT. The time now is 12:51 AM.

 

Powered by vBulletin® Version 3.8.4
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.


These pages are specifically maintained for the discussion of firewall issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases. issues within the Open Source community, and might already reflect new alpha/beta releases under development. Please refer to our product specifications for the functionality of the actual release. Discussions of new/enhanced functionality does not constitute a commitment of Astaro, to integrate this functionality into future releases.