LinkSys RV082 VPN Setup

[1DMF]

Hi,

I'm having a total nightmare trying to get this router to connect remote VPN users.

We have a gateway 2 gateway VPN tunnel working no problem, but I cannot get the client 2 gateway to work.

I've set an IKE shared key, I've stopped the VPN passthrough, I've created a VPN group, I've created a VPN user, but when ever anyone tries to connect to the VPN with the windows VPN client we get...

error 789 : the L2TP connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer.

I've set logging on the router but there isn't any mention of any attempted connection, successful, failed or otherwise.

I've checked the windows event viewer and there are no errors reported either.

I've found this old TT thread thread463-729018 but it seems no one found a solution to this problem?

Does anyone know if the RV082 client VPN actually works and if so how?

thanks 1DMF

"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Google Rank Extractor -> Perl beta with FusionCharts

 

[burtsbees]

It sounds like IKE Phase one is failing. Make sure that the settings match. Is this really an L2TP tunnel? Also, have you tried the solutions posted in that thread, like the Greenbow VPN Client? Windows sucks. Hell, I'd even try a Cisco vpn client. Anyway, tis sounds like an IPSEC VPN, not L2TP...

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[1DMF]

Well yes i am trying to set up IPSec VPN, however, windows VPN client under the 'network' tab groups L2TP & IPSec together as the option in the drop down.

Also the solution MUST be via windows built in VPN network connection.

As our remote support company won't dedicate a machine for them to remote connect to us installing any required software is not an option.

If they were to dedicate a machine, I could have got them to install a user certificate and they could connect via PPTP & SSL like I have the IAS/RRAS working currently.

It's only because they are being difficult that I'm trying to configure the built in VPN capabilities.

PPTP on the box works fine, but only allows max 4 VPN tunnels, so is of no use for remote users, plus then the other method doesn't work because the firewall is dealing with PPTP server request and not passing them through to the SBS server.

Make sure that the settings match.

What settings? if you mean the shared IPSec key and user credentials, then yes, i've checked, double checked and even changed them and checked then double checked.

I even got the missus from her work to try, to ensure someone outside the internal network tried as I know this can cause conflicts.












"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Google Rank Extractor -> Perl beta with FusionCharts

 

[burtsbees]

Settings meaning IKE proposals (encryption, hash if any, Diffie-Helman group, etc.).

/

tim@tim-laptop ~ $ sudo apt-get install windows
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package windows...Thank Goodness!

 

[1DMF]

Well I checked and double checked the following.

On VPN Box

1. Opened ports 500 & 1701
2. Disabled all VPN pass through
3. Created client 2 gateway VPN group as per screen shot
4. Created VPN user

On Windows Client (Network Connection)

1. Security Tab : Set IPSec key
2. Security Tab (Advanced Option) :

a)Require encryption otherwise disconnect
b)EAP Option : MD5 Challenge selected

3. Networking Tab : L2TP IPSec VPN Selected
4. Networking Tab (PPP Options) :

a) Enable LCP Extentions
b) Enable Software Compression

Is there something I have missed out?

What else is there I need to do because I keep getting an L2TP authentication errors either 789 - attempt failed or 792 - timed out.



"In complete darkness we are all the same, only our knowledge and wisdom separates us, don't let your eyes deceive you."

"If a shortcut was meant to be easy, it wouldn't be a shortcut, it would be the way!"

Google Rank Extractor -> Perl beta with FusionCharts