Dlink DI-824VUP Site-To-Site Problem

[BlueNowhere]

I Have 2 Dlink DI-824VUP's for a site to site vpn. I follow the directions from Dlink (be as they may) and I can't get them connected. Both locations have static IP's. In the VPN status window it just tells me the vpn is IDLE. There is no connection tho. I can't figure it out????????

Thanks for any help!

 

[TidyTrax]

Can you post your settings for the two D-Links......

 

[BlueNowhere]

VPN= enabled on both sites
NetBios Broadcast= enabled on both sites
Method= IKE on both sites

Site A Site B
Tunnel Name Blah Blah
Aggressive Mode Enabled Enabled
Local Subnet 192.168.0.0 192.168.0.0
Local Netmask 255.255.255.0 255.255.255.0
Remote Subnet 192.168.0.0 192.168.0.0
Remote Netmask 255.255.255.0 255.255.255.0
Remote Gateway WAN IP of Site B WAN IP of Site A
IKE keep alive ping add 192.168.0.1 192.168.0.1
Preshared Key same on A and B

IKE Proposal index =same on A and B
DH Group= 1
Encrypt algorithm= 3DES
Auth algorithm= MD5
Life Time= 300
Life Time Unit= Sec

IPSec Proposal index= same on A and B
DH Group = 1
Encap protocol = ESP
Encrypt algorithm = 3DES
Auth algorithm = MD5
Life Time = 300
Life Time Unit = Sec

Using Sprint DSL on A and B w/Static IP's

I called Dlink and they told me they don't support the VPN
aspect of the product.

Thanks again for the help.

 

[TidyTrax]

You have the same subnet on both sides of the VPN 192.168.0.x change one side to another subnet eg: 192.168.1.x

Let me know how you go

 

[BlueNowhere]

OK, I changed the Subnet on Site B to 10.0.0.0 and nothing changed for about 5 min.Then I checked the ststus and I had a connection for about 5 min. Now I have no connection again.
I just don't get it?????

 

[ROUTERKID1]

Seems to be getting confused at that point with the same 192.168.0.x on both sides.

 

[TidyTrax]

You have changed all machines, routers - all network devices in Site B to that sub net 10.0.0.x?!!?!?!

Try completely recreating the VPN Policy on the router, delete the old one and start from scratch - post your settings again if you still have problems

 

[ROUTERKID1]

192.168.1.X will be fine as well different subnet

 

[BlueNowhere]

OK, I got it!
I changed the Netmask on Site B to 255.255.255.240 from 255.255.255.0 and I have a constant connection.

Thanks to TidyTrax for the help. I wouldn't have ever gotten it without the suggestions.

 

[ROUTERKID1]

Cool, that is great Technology

 

[TidyTrax]

Your prob better having the 10.0.0.x subnet with subnet mask 255.0.0.0 rather than 255.255.255.240 - but if its working..................

 

[BlueNowhere]

I'm afraid to change anything since it's working now.

Now all I have to do is get our Access Database working.

Thanks again for the help.