Cisco VPN Client and Linksys RV082 Router

metallica1973 · 06-26-2007, 07:05 PM

I think that I have setup the VPN portion of the Linksys RV082 router:

I have created a vpn group (a tunnel called test), it is using

Enc/Auth/Grp
3DES,MD5,1

Local Group
192.168.1.0
255.255.255.0

remtote client - e-mail

and I finally created the VPN clients

user - test

When I try and use the Cisco Linux/Windows VPN client I cannot connect. I tried using tcp 10000,4500,500 and etc but it will not connect. When I use the quick vpn from Linksys it connects fine. The quick VPN used tcp port 443 (which is using https) or 60443. It is a piece of work. Here is my Cisco linux VPN .pcf

PHP Code:


			
[main]
Description=Test VPN connection
Host=xx.xx.xx.xx
AuthType=1
GroupName=Outside_Access
EnableISPConnect=0
ISPConnectType=0
ISPConnect=
ISPCommand=
Username=test
SaveUserPassword=2
EnableBackup=0
BackupServer=
EnableNat=1
CertStore=0
CertName=
CertPath=
CertSubjectName=
CertSerialHash=00000000000000000000000000000000
DHGroup=2
ForceKeepAlives=0
UserPassword=
enc_UserPassword=618E5C8C8F7F99732637E2C9708151E4D8873E639DA1D6CCCAE7F55B8CF6CB6839C797A8EB8513FD2F057BE01F5C3EF14C3AEA7606FCBE56
GroupPwd=
enc_GroupPwd=618E5C8C8F7F99732637E2C9708151E4D8873E6301D46CFDC3869BADF37D90439C4DED9B67616BEC5F188DC52DEF9BA21583B9BCC1E6E8C8
ISPPhonebook=
NTDomain=
EnableMSLogon=1
MSLogonType=0
TunnelingMode=1
TcpTunnelingPort=10000
SendCertChain=0
PeerTimeout=90
EnableLocalLAN=0

help

Jathrop · 06-27-2007, 02:30 PM

Not sure if this will help, but try disabling the transparent tunneling. Also, are you using IPSec/UDP or IPSec/TCP? You might try changing to the latter if you are currently using the former. Hope that helps!

metallica1973 · 06-27-2007, 03:33 PM

I tried that but to know evail. thanks

acid_kewpie · 06-27-2007, 03:51 PM

have you tried using vpnc instead of the real cisco one? it's a potential point of difference for comparison, or maybe even a solution. and me being me... tried packet sniffing it?

also note that the traffic isn't *actually* tcp or udp at all, it just pretends to be so that some routers can do port translation to support multiple connections and NAT in general. i'd be tempted to concentrate on the router itself... they often have options to block vpn's on purpose for security reasons for example.

metallica1973 · 06-27-2007, 07:29 PM

I havnt tried vpnc but I client it on my behind about this so I will try to wireshark it and see what I can find. I also will setup logging on the cisco client software.

metallica1973 · 06-27-2007, 08:11 PM

Acid_kewpie

check out this log message when I try and connect to Linksys RV082:

PHP Code:


			
Jun 27 19:13:37 2007        Connection Accepted        UDP xx.xxx.xx.xxx:500->xx.xxx.xxx.xxx:500 on ixp1
Jun 27 19:13:42 2007        VPN Log       size (874) differs from size specified in ISAKMP HDR (858) Jun 27 19:09:27 2007         VPN Log        size (874) differs from size specified in ISAKMP HDR (858)

what does that mean?

metallica1973 · 06-27-2007, 08:35 PM

I spoke to Linksys/Cisco and they said that perticular model can only due a gateway to gateway setup and that it cannot perform client to gateway what I am trying to due now. So on that note what linux VPN server software to you recommend for the task?