Trying to work out why this vpn wont work

[MunkynPunky]

hi, Ive just taken over a network, as the other tech guy has been sacked, and ive never seen a tunnel system like it.

they are using netgear routers, and they have 8 fixed ip address's

then, he has set up a load of dyndns accounts, and pointed them to the ip address, using the router.

but, if you turn off the router, and turn it on, the ip address changes and then it falls over.

i assumed you would specifiy a static ip address in the router, and that is it then, no matter how may times you turn off the router, it will always have the right ip address..

why would the guy even use dyndns accounts?

 

[pronet74]

Yes, if you make the IP static it will hold that IP no matter how many times you power-cycle the router.

Not sure why he would give a router a dyndns name. At my company we have an external website, however we have customer data, that only our customers can get to, so we have it at our location. I have a dyndns pointing to my server here at the company so that when I coded the website it would be easier to remember than putting in the IP address.

Maybe he wanted to access the routers easier by using the dns names, however by setting it to dynamic IP it would never work (unless you never turn off the routers).

 

[MunkynPunky]

apparently he used static ip numbers first, and the tunnel kept collapsing, so he registered 12 dyndns names, and used them, becuase the netgear routers we use, allows you to enter the account details from dyndns, and it auto updates with the ip address that the client machine is using..

however, this does work to a point, because i can log in to the router, but very very often the VPN tunnel is disconnected, and will not connect, even if i click connect!

Any ideas?

 

[MunkynPunky]

and, i cannot dial in to the servers dyn address, and all the tunnels connect to it using the dyn address...

the ip address doesnt work either?

 

[MunkynPunky]

i can connect to the server using remote desktop though, so the server router must be different..

there is a netgear firewall installed, i would have thought that should be remoter access.. but I cant get to it.

This is a nightmare..

 

[MunkynPunky]

in the router logs it says:

Sun, 2006-11-19 12:06:34 - [ec022wh] terminating SAs using this connection
Sun, 2006-11-19 12:06:35 - [ec022wh] initiating Main Mode
Sun, 2006-11-19 12:06:45 - [ec022wh] STATE_MAIN_I1: retransmission; will wait 20s for response
Sun, 2006-11-19 12:07:05 - [ec022wh] STATE_MAIN_I1: retransmission; will wait 40s for response
Sun, 2006-11-19 12:07:45 - [ec022wh] max number of retransmissions reached STATE_MAIN_I1. No acceptable response to our first IKE message

Why is this? This is when the VPN is down.