Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Vista and MUVPN

Status
Not open for further replies.

Frankenherder

IS-IT--Management
Jun 11, 2003
405
CA
OK, I am using the latest MUVPN Client trying to connect to an X10e.

The WGX connects 100% fine from and XP machine, it will not connect from a vista machine.

I get the link established, and I can Tx, but the Rx stays at 0. I have disabled the windows firewall temporarily and it does not help.

There are no other IPSEC clients installed that I know of (Not sure if Vista installs one by default)

Can anyone help? I have tried Watchguard forums to no avail.

Thanks
Matt
 
We installed in Our Company a x750e with several working VPN-Configurations, named in Watchguard "VPN-Groups".

Because the VPN IPSec -Wizard does not differ between VPN-Group-Names, AD-Member-Goups-Names (for Authetication in Active Directory) , Local Identifier (as e-Mail User FQDN) or Remote Identifier (as FQDN), there is to take the same name for all these (different) groups.

For future new Groups and for better identifying existing groups, I decided to rename the names of the AD-Groups on our DC, and to create new VPN-Groups with these new names.
I used the name "SSG_VPN-Administration" and "SSG-VPN-Administration".
After adding members to these groups, I created the VPN-Groups in Watchguard. Some time ago, I had problems using complex preshared Keys with "!" or "%"-characters with a Macintosh Client, so I uses only simple letters and chiffres.

The interesting thing was, that the both VPN-Configurations worked well, IKE, Phase2 with AES128, and Authorization worked well. But the group "SSG_VPN-Administration" had the same result like your configuration: TX is OK, RX is zero.
The other config with the similar name but without underscore "SSG-VPN-Administration" worked full. I can connect, VNC, Ping, connect to shares on all internal servers.
So my opinion is: Not all characters are allowed for config- or groupnames (and for passphrases (PSK)).

Will you check, if your group-names meets these conditions?

Thanks for your answer.

Regards
Juergen
 
Hello. I am creating the user accounts on my X10e. No special charcters or anything in use.

On my 3rd Watchguard support tech and still no resolution.
'
If my problem is resolved, I will let you know

Matt
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top