Hi I have really really irritating problem. I have Zywall 110 and some remote site users that need to gain access to our network. They and we, have public IP addresses. In the attachment are two phases. I am also sending you the greenbow client configuration. All clients are configured on the same way just , local IP is different ( I indicated below )
Please help, I called zyxel support and they proposed to change negotiation method on every client, the result was the same.
Do I need to somehow change ports for every user ?
Thanks !
# Do not edit this file. It is overwritten by VpnConf.
# SIGNATURE MD5 = xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
# Creation Date : 2014-02-05 at 09:55:54
# Written by VpnConf 5.51
#
[General]
Shared-SADB = Defined
Retransmits = 2
Exchange-max-time = 15
Default-phase-1-lifetime = 3600,360:86400
Bitblocking = 0
Xauth-interval = 60
DPD-interval = 30
DPD_retrans = 5
DPD_wait = 15
[Default-phase-2-lifetime]
LIFE_TYPE = SECONDS
LIFE_DURATION = 3600,300:86400
# ==================== PHASES 1 ====================
[Phase 1]
StaticIP = Gateway-P1
[Gateway-main-mode]
DOI = IPSEC
EXCHANGE_TYPE = ID_PROT
Transforms = AES128-SHA-GRP1
[AES128-SHA-GRP1]
ENCRYPTION_ALGORITHM = AES_CBC
KEY_LENGTH = 128,128:256
HASH_ALGORITHM = SHA
GROUP_DESCRIPTION = MODP_768
AUTHENTICATION_METHOD = PRE_SHARED
Life = LIFE_MAIN_MODE
[Gateway-P1]
Phase = 1
Address = StaticIP
Transport = udp
Configuration = Gateway-main-mode
Authentication = "Blahblah"
# ==================== PHASES 2 ====================
[Phase 2]
Manual-connections = Gateway-Tunnel-P2
[Gateway-Tunnel-P2]
Phase = 2
ISAKMP-peer = Gateway-P1
Local-ID = Tunnel-local-addr
Remote-ID = Tunnel-remote-addr
Configuration = Tunnel-quick-mode
AutoStart = 0
USBStart = 0
AltDns = 192.168.1.1
AltWins = 0.0.0.0
# ==================== Ipsec ID ====================
[Tunnel-local-addr]
ID-type = IPV4_ADDR
Address = 192.18.0.0 #this is different on the client Pcs.
[Tunnel-remote-addr]
ID-type = IPV4_ADDR_SUBNET
Network = 192.168.1.0
Netmask = 255.255.255.0
# ==================== TRANSFORMS ====================
[Tunnel-quick-mode]
DOI = IPSEC
EXCHANGE_TYPE = QUICK_MODE
Suites = Tunnel-quick-mode-suite
[Tunnel-quick-mode-suite]
Protocols = TGBQM-ESP-AES128-SHA-PFSGRP1-TUN
[TGBQM-ESP-AES128-SHA-PFSGRP1-TUN]
PROTOCOL_ID = IPSEC_ESP
Transforms = TGBQM-ESP-AES128-SHA-PFSGRP1-TUN-XF
[TGBQM-ESP-AES128-SHA-PFSGRP1-TUN-XF]
TRANSFORM_ID = AES
KEY_LENGTH = 128,128:256
AUTHENTICATION_ALGORITHM = HMAC_SHA
GROUP_DESCRIPTION = MODP_768
ENCAPSULATION_MODE = TUNNEL
Life = Default-phase-2-lifetime
# ==================== CERTIFICATES ====================
↧
