IPSEC VPN with Netgear DG834

[Bentley]

Has anyone managed to get a CheckPoint SecuRemote VPN-1 working over a Netgear DG834? Or any IPSEC VPN for that matter? Machines behind the DG834 are NAT-ted but only one needs the VPN so a solution involving port forwarding will help.

The DG834 is meant to "pass through" IPSEC and PPTP without requiring port forwarding but I can't seem to get it to work.

Any pointers on what to ask the firewall people for about the setup would also be useful. (I know a little about these things but not too much...)

 

[zipper]

I had the same problem CheckPoint SR on D-link 504G router. The default LAN address the 504g use is 10.1.1.x. That subnet is used internaly by SR and it causes problems in routing. I changed the LAN address to 192.168.1.x and that fixed the problem. Maybe you have the same problem with your router.

 

[Bentley]

<blockquote id="quote"><font size="1" face="Verdana, Arial, Helvetica" id="quote">quote:<hr height="1" noshade id="quote"><i>Originally posted by zipper</i>
<br />I had the same problem CheckPoint SR on D-link 504G router. The default LAN address the 504g use is 10.1.1.x. That subnet is used internaly by SR and it causes problems in routing. I changed the LAN address to 192.168.1.x and that fixed the problem. Maybe you have the same problem with your router.
<hr height="1" noshade id="quote"></blockquote id="quote"></font id="quote">
Nah. I can authenticate, but not create the tunnel. Have tried UDP encapsulation too, but it did not help.

 

[hamishahern]

I too have the same problem with my netgear DG834G firmware 1.05.00 and the securemote software. it connects/authenticates successfully but fails to communicate, I can see all the traffic going out, but then no traffic ever makes it back to my applications.

I set DMZ to my computer ip 192.168.0.2
still didn't work, I have Support IKE over TCP set to YES
and I have Force UDP encapsulation set to YES
I tried many many things, still doesn't work.

I can successfully set securemote up on my other Billion router, this netgear seems to be a piece of junk.

Any ideas to try? any settings at the FW server that can help?
any suggestions to be made to NetGear on what needs fixin in their router?

 

[kaspaas]

I have no problems using IPSec between 2 ADSL linked LAN's

LAN 1 uses the Telkom modem with IPCop at the end (PPPoE).

On LAN 2 I installed the required software on the workstations requiring access. This LAN conencts via Netgear DG834

Works like a charm.

But you need different IP Number ranges on both ends.

South Africa needs World Class Broadband at World Competitive Prices.