(racoon 685) Need help connecting to NetScreen VPN
Saad Malik <[email protected]> Wed, 1 Sep 2004 12:22:26 -0700 (PDT)
| Newsgroups | gmane.network.ipv6.kame.racoon |
|---|---|
| Message-ID | <[email protected]> |
Hi Everyone,
I'm a newbie to VPN (and networking) and would really appreciate someone helping me. I have been
for the last 3 days pulling my hair out trying to connect to a NetScreen VPN to my work. In
windows, the netscreen remote (vpn client) easily connects without problems... However I would
really like to be able to connect using linux.
I have tried many guides online for VPN but have failed in all of them. So far I have managed to
rebuild the kernel and start racoon with no problems. But the configration is no where working.
I'm listing all my settings that I see in NetScreen Remote.. hopefully somone will help me create
all the racoon.conf, ipsec.conf... what ever files..
*** Remote Party Identity and Addressing
ID Type: IP Subnet
Subnet: 192.168.0.0
Mask: 255.255.255.0
Protocol: All
Connect using: Secure Gateway Tunnel
ID Type: Ip Address
64.xx.xx.xx <-- ip to vpn router
**MY IDENTITY
Preshared Key: { A regular string xxxx }
Certificate: None
ID Type: Email Address
[email protected] <--- my email address @ work
SECURITY POLICY
**Select Phase 1 Negotiation Mode
Aggressive Mode (selected)
Perfect Forward Secrecy (disabled)
** Authentication (Phase 1 Proposal)
Authentication: Preshared Key; Extended Authentication
Encrypt Alg: Triple DES
Hash Alg: SHA-1
SA LIFE: Unspecified
Key Group: Diffie-Helman Group 2
**Key Exchange (Phase 2)
SA Life: Unspecified
Compression: None
Encapsulation (ESP) Protocal: (true)
Encrypt ALg: Triple DES
Hash Alg: SHA-1
Encapsulation: Tunnel
Authentication Protocal (AH) **** DISABLED***
Also note, that as soon as I hit connect on the vpn router... then a box pops up that asks me for
another username and password...I just type in work email without domain, and then I type in a
special password given to me.
I would really like this to work, and I hope you one you guys can help me out :)
If it works, I'll post a nice Howto so other users will also be able to connect.
Saad.