RE: VPN IPSEC connection successful, but can't browse - r esolved

I replaced the Linksys router, but problem was still there. One word of
advise, don't call Linksys support...in order to troubleshoot IPSEC VPN
connection they opened PPTP ports and NetBIOS ports on the router...without
any success solving the problem, duh.

The answer is Microsoft Knowledge Base Article - 314825: How to Troubleshoot
Black Hole Router Issues (Windows XP)

http://support.microsoft.com/default.aspx?scid=kb;en-us;314825

The problem was MTU settings, but changing MTU size on router only did not
help. I had to set router MTU size to 1472, than use Method 1 AND Method 3
from KB article together to make things work. For Method 3 my highest
setting is MTU 1390, that's the highest number that allowed my "Ping
IP_address -f -l 1390"  to respond. The strange thing, setting router's MTU
to 1500 would allow my non-fragmented block go up to 1400, so there is quite
a difference between router's and OS setting. I still believe that issue
with a router firmware (and I've tried 3 different versions) or design,
since connection was working without Linksys or through my other Zyxel P312
router. Thanks all for responding.

Cheers,
George Lavrov

-----Original Message-----
From: George Lavrov [mailto:[email protected]] 
Sent: Saturday, August 02, 2003 5:41 PM
To: '[email protected]'
Subject: [VPN] VPN IPSEC connection successful, but can't browse 


Hello fellows,

I would greatly appreciate any help with the problem I am having:

I have a home pc which connects via Netscreen-Remote VPN software client to
my work. When my PC connected directly to ADSL modem and utilizes WAN IP
address, I connect without any problem. However since I installed Linksys
BEFSX41 router/firewall and assigned to my PC private ip, I can ping ip
addresses of PCs at work, but can't see them, map drives or (most important)
initiated terminal sessions. When I initiate terminal session, I don't get a
connection error right away, instead remote server will present me with a
terminal screen, but it will be black, and only then I will get error: "the
connection to the remote computer was broken..." I follow instructions from
Linksys site and enabled port triggering on the router (50-50 ->incoming->
500-500), but no luck. Could it be a bad hardware or anything else I could
try, since Linksys tech support is totally clueless. 

I am running WindowsXP and connecting to Win2000 servers through Netscreen
5xp VPN:

WINXP with Netscreen-Remote --> Linksys BEFSX41 --> 		Netscreen
5xp VPN -->	WIN2K Server
172.16.1.100   			  172.16.1.1 - 64.x.x.x		64.x.x.x
192.168.1.200


Thanks a lot in advance.

Gueorgui
[email protected]


_______________________________________________
VPN mailing list
[email protected]
http://lists.shmoo.com/mailman/listinfo/vpn