Topic: IPSec VPN client behind SME firewall

[Jack McCauley]

We are trying to run an IPSec VPN client from behind the SME server 5.5 firewall, and are not having any luck.  The client we are trying to use is Nortel's Contivity VPN Client.  Has anyone had any luck using an IPSec VPN client from behind the SME firewall?

[steve]

I use Checkpoint's VPN client (SecureRemote..I think it is called) on Win98 behind SME 5.5
No problems.

[ryan]

Jack,

I had problems with Nortel Extranet IPSEC vpn client with SME 5.1.2.  The following is from a posting from this forum.  These commands allow multiple Nortel Extranet connections to pass through 5.1.2.  I don't know if they will work for 5.5, but it is worth a shot.  Please post if this works for you or not.

Commands:

# /sbin/e-smith/db configuration setprop masq ipsec yes
# /sbin/e-smith/signal-event remoteaccess-update

I had to also check 'disable keep alives' on each client or the connection will fail within a few minutes.

Good luck,

ryan

[Jack McCauley]

Ryan;

  Thanks, your solution worked perfectly.

[Ron Tan]

Hi,
Can I know how to setup IPSec in E-smith ?
Regards,
Ron

[ryan]

Ron,

Do a search in here for IPSEC VPN.  That should help if your using 5.1.2 or less.  I have read that 5.5 involves further tweaking beyond the How -  To to get it to work.  

good luck,

ryan

[Garret]

Has anyone gotten past the ipsec issues with 5.5?

Thanks

Garret

[Doug Necessary]

I just tried this behind 5.5 with the Nortel VPN V04_60.51 and it works great.  Did not have to modify the client at all.

[Ron]

Hi,
Are your guy is discussion access e-smith box for road warrior using ipsec ?
I've not seen any article about how to configure e-smith to access ipsec for road warrior, anyone can help ?