Configuring W2K VPN client to Access NetScreen 25

[Exo]

Hi,

I am a newbie at Netscreen 25. I have been assigned to setup VPN on NS-25. Unfortunately, my company didn't buy tech support neither Netscreen Remote Client Software.

So far the box is not in production yet so I am trying to test this offline.

Here's the config:

Eth1 (Trust,Nat) 192.168.1.10 private network (users)
(users will use DHCP IPs, locally)
Eth2 (DMZ, Route) 192.168.10.1 private netowrk (servers)
Eth3 (Untrust, Route)66.214.37.37 interfacing the internet.
User accessing remotely may or may not have static IPs.

So far, I have each interface connected to a switch which has a few worksstations attached on each one. (just experiment)

What I would like to accomplish is to be able to VPN in from the outside as well as within the LAN environment.

I have tried to set this up but unsuccessful. I am very new at this. Any help on this would be much appreciated.

Thanks in advance.

Exo (exo_wa@yahoo.com)

 

[alanwebb]

Hi,

I am trying the same thing on a NS25 as well.

I am using this link which ciontsins a guide.

Let me know if you get this to work.

http://www.netscreen.com/support/downloads/4.0_configuring_screenOS_for_NTdomain_v11.pdf

 

[carl70]

I've had an incredibly frustrating time trying to set up myh NS25 to work with XAuth.

I've tried to go by the pdf mentioned by alanwebb, but to no avail.

I can manage to dial-up vpn user through the VPN wizard, and it works (with netscreen remote client 8.0), but as soon as you put Xauth into the mix, nothing works.

I'm stumped. Any ideas would be appreciated.

 

[penauroth]

Use this link to setup Xauth. It worked for my NS5XP and NS5XT.

http://search.netscreen.com/query.h...nh=10&lk=1&rf=0&rq=0&si=0&qt=RADIUS_IAS+Setup

If you are using Autokey IKE make sure you specify the Xauth server in the gateway by selecting the Enable XAUTH, etc.

Debug your VPN tunnel and check the event logs to aid in troubleshooting.

Good luck.

Paul