Page 1 of 1

Firewall blocking connexions via IPSec

Posted: Thu Aug 27, 2015 9:49 am
by joshYarnspinner
...

Re: Firewall blocking connexions via IPSec

Posted: Fri Aug 28, 2015 8:17 am
by joshYarnspinner
Anyone?

Re: Firewall blocking connexions via IPSec

Posted: Fri Aug 28, 2015 8:30 pm
by jdubjr
On the firewall, your port numbers look ok except for one. Double check they are the correct protocol too.

UDP - 500
UDP - 4500
TCP - 443
TCP - 992
TCP - 1194
TCP - 5555

Your symptoms sound like ports 500 and 4500 are not UDP.

Re: Firewall blocking connexions via IPSec

Posted: Fri Aug 28, 2015 10:29 pm
by joshYarnspinner
jdubjr wrote:
> On the firewall, your port numbers look ok except for one. Double check
> they are the correct protocol too.
>
> UDP - 500
> UDP - 4500
> TCP - 443
> TCP - 992
> TCP - 1194
> TCP - 5555
>
> Your symptoms sound like ports 500 and 4500 are not UDP.
They are all TCP/UDP

Re: Firewall blocking connexions via IPSec

Posted: Sat Aug 29, 2015 1:20 am
by jdubjr
Have you tried setting the RPi as the DMZ host in your Super Hub 2?

Re: Firewall blocking connexions via IPSec

Posted: Sat Aug 29, 2015 1:45 am
by jdubjr
One difference I see between your config and mine is I have:

bool L2TP_Raw false

I'm pretty sure you don't want that set to true. That would be an unencrypted connection.

Re: Firewall blocking connexions via IPSec

Posted: Sat Aug 29, 2015 7:20 am
by joshYarnspinner
jdubjr wrote:
> Have you tried setting the RPi as the DMZ host in your Super Hub 2?
Yes. Didn't work. Also the L2TP thing has been changed I don't think it affects whether I'm able to connect.

Re: Firewall blocking connexions via IPSec

Posted: Sun Aug 30, 2015 4:27 pm
by joshYarnspinner
Any other suggestions? I've checked and made sure all the ports are forwarded etc... also disabled the L2TP thing.

Re: Firewall blocking connexions via IPSec

Posted: Mon Aug 31, 2015 1:08 am
by jdubjr
Any clues in the packet logs on the VPN server? If not, I would do a wireshark capture next.

Re: Firewall blocking connexions via IPSec

Posted: Mon Aug 31, 2015 7:31 pm
by jdubjr

Re: Firewall blocking connexions via IPSec

Posted: Mon Aug 31, 2015 7:39 pm
by joshYarnspinner
jdubjr wrote:
> Seen this tutorial?
>
>
> http://tomearp.blogspot.com/2013/11/set ... ether.html

Yes, I followed it to set up the Pi. I'm attempting to get the logs out right now but I am not sure which ones to take out.

Re: Firewall blocking connexions via IPSec

Posted: Thu Sep 10, 2015 7:46 am
by thisjun
Please show a log around connecting time.

Re: Firewall blocking connexions via IPSec

Posted: Sat Sep 26, 2015 3:53 pm
by joshYarnspinner
...

Re: Firewall blocking connexions via IPSec

Posted: Thu Oct 08, 2015 8:27 am
by thisjun
In the log, user name "temporary_session" is used for auth.
Is it correct? Is there the user name on a RADIUS?