Site-to-Site VPN Admin on two 10.4.4 Servers

[Twintails]

HELP!

So I have all the VPN Connections working over L2TP wonderfully.
however, when I setup the s2svpnadmin on both servers the networks go down, I think it is partially the rule apple says to add in the book on pg 114. I also think it has a bit to do with using the 192.168.2.0/16 CIDR. It seems to me theat we need /24 CIDR as the sites are on their respective subnets, I can understand the need to have the servers see the seperate subnet, but isn’t that what NAT is for?
Is it something to do witht he Firewall settings?

has anyone got it working, can you copy me on what ports you opened in the any setup in the Firewall and what advanced rules are needed to establish the connection.

Any help, step by step instructions would be wonderful.

[Twintails]

Public Site 1 xxx.xxx.xxx.xxx
Public Site 2 yyy.yyy.yyy.yyy
Private Site Gateway and DHCP/VPN Server Address 192.168.1.3
Priveate Site 2 Gateway and DHCP/VPN Server Address 192.168.2.1
So In s2svpnadmin I use
Site 1 Private Subnet 192.168.1.0
CIDR Mask 16 <--Like the book says
Site 2 Private Subnet 192.168.2.0
CIDR Mask 16

Both use a shared secret

The gatewawa on Site 1 is .1.3 because the server running FMProserver Has to be @192.168.1.1 and it’s Backup is at .1.2 so the gateway is at .1.3 and serves out 1.4-127 in DHCP and 128-250 in VPN

Site 2 Serves out 2.2-127 in DHCP and 128-250 in VPN

The firewall is open to all traffic on the 192.168.0.0/16 subnet and the main firewall only allows the Gateway setup essentials and VPN ISAKMP 500, VPN L2TP 1701 and 50-51 and 4500 i think because the VPN Needed them to connect.

however when a user connects to VPN from afar they loose Network Connectivity

[Author]

Posts