Configuring remote client on Symantec 200R

[jsavell]

apeasecpc was very helpful in prior reply to my questions on configuring remote clients. I am unable to get a successful logon. There are still some things I may not be filling out correctly, and would appreciate your help.
In the installation, I used the setup program in the 3DES folder. But when I set up the IKE policy on the VPN client, I select 3DES but when the window opens again it comes up as ANY. Is this a problem?
What do I fill in for Security Gateway? I put in the external IP address of my 200R. What should Gateway ID in the advanced box be set to? Do I ever have to fill in the local IP address (192 etc) of the 200R?
When Symantec Security Gateway is unchecked, attempting to connect gives immediate failure. If I check the box, it attempts to connect but eventually fails.
By the way, I'm using Win 98SE on the client computer.

Thanks again for your help.

 

[jsavell]

Sorry to reply to my own question, but I finally had success connecting using the remote client, after putting the 192.168.1.0 as the IP address of the tunnel.
Does the remote user appear as a local IP address on the host? Can you see the remote user in the 200R administration utility? Can the remote user FTP a file from a computer under the 200R?
Thanks again.

 

[apeasecpc]

The remote user does not appear as a local IP address on the host. The IP address of the remote user is whatever address was assigned by the remote ISP and network. If your routing is able to resolve to this IP address you should theoretically be able to initiate network traffic from the host end, however I have never tested this so I can't confirm that the symantec encrypts this traffic over the VPN. Actions initiated from the remote end are encrypted over the VPN.

In the 200R administration utility whenever there is an active VPN the remote user is listed by IP address and security association under the dynamic key setup screen. Unfortunately the client identity information is not shown.

You should be able to FTP from the remote to the host (I currently do this).