Re: [LUG] Problems VPNing with IPCop 1.3+patches?

[Robin Cornelius <robin@xxxxxxxxxxxxxxxxxxxxx>]

Many routers are VPN aware and just seem to cope with ESP, my netgear does i 
set it to forward UDP500 and UDP4500 and ESP just seems to arrive at the 
correct place!.

Is the Windows VPN wizard compatible with IPCOP? i am not familiar with it. 
ALl i know is that the VPN wizard in window will try to create either a L2TP 
(Layer 2 tunneling protocol) tunnel or a PPTP tunnel (point to point 
tunnunling protocol), either of which may or may not be wrapped in IPSEC 
security. If you want a "RAW" ipsec tunnle you cannot use windows VPN wizard. 
Look for Marcus Mullers IPSEC tool's.

Regards

Robin

On Wednesday 10 November 2004 18:48, Grant Sewell wrote:
> On Wed, 10 Nov 2004 18:33:18 +0000
>
> Robin Cornelius <robin@xxxxxxxxxxxxxxxxxxxxx> wrote:
> > If you are using ipsec then UDP500 is only used for IKE negtations
> > afterwards the encrypted packets are ESP that is type 53 NOT UDP, NOT TCP
> > but ESP. If you have NAT-T patches at both ends then you don't see ESP
> > but UDP4500 [changed].
> >
> > Regards
> >
> > Robin
>
> Ok, so with my current setup (below), I will be able to establish a VPN
> (I'm guessing it does use IPSec) but I won't be able to actually connect? 
> Or will my modem/router simply forward any packets that aren't tcp/udp, do
> you thinnk?
>
> ---[Modem/Router]---[IPCop]---[Switch]===
>
> Thanks.

-- 

Robin Cornelius
---------------------------------------------------
robin@xxxxxxxxxxxxxxxxxxxxx
GPG Key ID: 0x729A79A23B7EE764
http://www.biglumber.com/x/web?qs=0x729A79A23B7EE764

Attachment: pgp00014.pgp
Description: PGP signature