Linksys BEFVP41 VPN problems

[ScottCudmore]

Hi,
I just purchased the new Linksys VPN router. I want to be able to connect to my home network from a remote Windows 2000 machine. There are no stpes or docs on how do do this. Only Linksys to Linksys VPN. When I connect from a Windows VPN conenction, all I get is an error on the Linksys.

Does anyone have any ideas?

Scott

 

[MattWray]

You do not need to forward port 47. That number is a protocol- IP protocol 47 GRE. Forward port 1723 only. Make sure if you have some sort of firewall you configure it to allow the VPN thru.. Matt Wray
CCNA, MCP
mwray77518@yahoo.com

 

[AdminBoy]

You all are missing the mark slightly on this post. It is not a VPN solution such as L2TP or PPTP. That is why there are no usernames or passwords. On 2K or Xp you will have to create a new IPSec policy by following the instructions in the manual or online. The problem comes in for those who are not running 2K or Xp.. you need to get a third party IPSEC client such as SSH's client. This is the only way you will be able to get it to work in a pre 2K machine... the method about adding PPTP adapter and all that junk is not even close to being right.. different world when you go that way. I am not sure if this post has helped or not but I just wanted to give you a heads up.

Thanks

 

[tfccom]

Alright Let's Summarize...

(Thanks For the Clarification AdminBoy!)

-The BEFVP41 IS a true headend VPN Soluition, Right?

-It DOES NOT use the standard Windows 2000 "Add connection Wizard"

-It Does provide authentication on the Router end of things

-It DOES need a IPSec policy to connect to Windows 2000 Pro

SO.....

How do you do this policy ---->

Start>Programs>Administrative Tools>Local Security Policy> then ??????????

I think we're all learning Alot; I know I am!!!!!

Trevor Farren

 

[DougTheDawg]

Trevor

Further summary:

The link below is the linksys description of how to set up the policy.

http://www.linksys.com/support/support.asp?spid=86

We should all then be able to ping a computer on the inside of the vpn router.

However, I get a lines like

Negotiating IP Security.
Negotiating IP Security.
Negotiating IP Security.
Negotiating IP Security.

Ping statistics for 192.168.1.103:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

There is still no connection.

So..... is it a problem with the IPSec settings or a setting on the VPN router ???????

I'am running out of ideas.

 

[Newthings]

Hi everyone

I have two questions
1) Once the VPN is established using 2 Linksys VPN, can the PCs browse the internet at the same time ?

2) Is a pair of Linksys a viable VPN solution ?

3) Is Linksys VPN a sufficient firewall solution ?

 

[Guest_imported]

Question: I am running a extremely small business (3 people in 2 separate offices) on 4 computers. 2 desktops running xp Pro, 1 laptop running Win2k Pro, and 1 laptop running NT server. Would setting up the BEFVP41 on one of the xp Pro desktops, be my best bet to link the other 3 computers through a VPN?

 

[pyx18]

I am also getting the same results..

Negotiating IP Security.
Negotiating IP Security.
Negotiating IP Security.
Negotiating IP Security.

Ping statistics for 192.168.1.101:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
Approximate round trip times in milli-seconds:
Minimum = 0ms, Maximum = 0ms, Average = 0ms

Question: Is the vpn screen on the router suppose to show connected or disconnected?

Has anyone got this thing to work? I have only been successful with tunneling to another vpn router....

Ideas anyone???

 

[madnessxx]

Still have not had the time to look at this windows -> linksys vpn but I was working with linksys on a problem where the DCHP address wasn't renewing after so many hours(yeah I know what does this have to do with VPN ... getting there) Linksys told me that my problem was that I didnt have the MAC cloneing option going on and that's how the cable company does the accounting for the IP's... knowing that he was full of BS (I wouldn't have rcv'd an IP in the first place) I tried this out. I was able to go out to the internet but the VPN (linksys to linksys) started to fail once I turned on the MAC Cloning. Reset the values to 00-00...ect and the VPN started to work.

So if have MAC cloning turned on you might want to try to disable that for testing (if you can)

 

[Guest_imported]

You have to configure Secpol.msc
The VPN router only uses IPSEC

 

[pyx18]

Ok just got this baby figured out, I used a set of different directions but it still works the same just throw out the part about certificates...

http://www.zyxel.com/support/supportnote/zywall10/app/zw_w2k.htm

 

[Newthings]

TO Pyx18
Thanks for revewing about zyel VPN. What kind of certificates you talk about?

I study the Zyel site and learn that it seems Zyel VPN can work with other's VPN boxes, unlike Linksys.

 

[DougTheDawg]

To pyx18

I looked at, and tried the directions zyxel web site. They do not seem to be any different than the directions on the Linksys site.

Is there some specific thing that you noticed was different?

I still get the same "Negotiating IP Security" message when I ping a machine inside the VPN box.

Any debug tips would be helpful.

Thanks

 

[Sam88]

I want to connect two BEFVP41 together but still they do not make a connection. One network has win 98 machines behind it and the other have running XP. Has anyone been able to do this successfuly. Can someone please tell me what I need to do. I have not installed any software on win 98 machines. And for the XP I am followed the online manual.
Any help is greatly appreciated.

 

[tfccom]

Here's an interesting side note to the whole scenario...this long weekend, when everyone is off the LAN and WAN, I'm going to be testing the Linksys VPN with a NetScreen, Lucent/Avaya, and a slew of other IPSec, actual full VPN clients, all licenced for other VPN boxes I'm working with....I can post the results if anyone is interested....

Trevor Farren,
t.farren@tfc-com.com

 

[Sam88]

Has anyone at least been able to make connection between two linksys VPN routers? I have tried any and everything but still can not make a tunnel.

 

[Guest_imported]

Linksys does have a step by step setup on their Knowledge Base. Just type in BEFVP41 as the keyword... Give me 60 bucks, and i will charge on a step by step setup. Its very easy once u set it up over and over.... I do it for a living here in chicago

 

[Guest_imported]

I can make these connect all the time... they are as solid as a rock!!

 

[Sam88]

Ok, I could connect two BEFVP41 together but how can I see the network on the other side assuming I have all win 98. Do I need to install any software or they should show up on network neighborhood??
thanks

 

[tcompe9139]

I two have successfully connected two BEFVP41 routers over a WAN. I am able to see both domains in Network Neighborhood. Both networks are Win2k Wks configured exactly the same. The only difference is the domain name.

Question:
Why can I not browse the remote network? I am unable to Ping/Map to either side even thought the VPN routers show connected.

Any Help would be greatly appreciated.

tcomp

 

[curious2]

Some Linksys BEFVP41's don't have netbios broadcasts enabled. There is a little known web interface on the linksys befvp41 router that has not been publicly announced by Linksys at this time. The reason Linksys does not yet acknowledge this feature is because they claim that all features do not work yet. Hence the reason they keep us in the dark.

To get to it, you'll have to type the following URL into your web browser to get to the advanced IPSec page. Like I said, it is not a widely known configuration page.

The address is 192.168.1.1/IPSecAdvance.htm

If the IPSec Advanced Configuration page does not come up, close out all your browsers and try it again. When you finally get to the page, you will see a box near the bottom of the page named Netbios broadcast passthrough or something to that effect. Select this box and hit OK or apply. You should now be able to pass netbios broadcasts through to the other network and vice versa.

Test it out and let me know how it goes.