AFP548 Changing the world one server at a time.

Twintails

Forum Replies Created

Viewing 2 posts - 1 through 2 (of 2 total)
  • Author
    Posts
  • in reply to: Site to Site VPN not coming back up #366374
    Twintails
    Participant

    Well, I have been trying to get mine to establish in the first place, and never have, I would be interested to know how you got it setup in the first place, so Maybe I could help troubleshoot it with you.

    In my settings I have
    S1: AAA.AAA.AAA.AAA
    S2: ZZZ.ZZZ.ZZZ.ZZZ

    Local Adresses
    S1:192.168.1.0
    S2:192.168.2.0
    Both Setup in s2sVPNAdmin with CIDR /24

    I have them both setup using the same shared secret setup in the VPN pane of the server admin tool. I have them using the same Firewall settings allowed for in the Linking two or more networks info on the Network Services Admin PDF on the Apple Site. (Pgs 112-116)

    Unfortunately when I turn VPN on After it tells me to, no link is established.
    So anyone with answers, Please assist.

    in reply to: Site-to-Site VPN Admin on two 10.4.4 Servers #365138
    Twintails
    Participant

    Public Site 1 xxx.xxx.xxx.xxx
    Public Site 2 yyy.yyy.yyy.yyy
    Private Site Gateway and DHCP/VPN Server Address 192.168.1.3
    Priveate Site 2 Gateway and DHCP/VPN Server Address 192.168.2.1
    So In s2svpnadmin I use
    Site 1 Private Subnet 192.168.1.0
    CIDR Mask 16 <--Like the book says
    Site 2 Private Subnet 192.168.2.0
    CIDR Mask 16

    Both use a shared secret

    The gatewawa on Site 1 is .1.3 because the server running FMProserver Has to be @192.168.1.1 and it’s Backup is at .1.2 so the gateway is at .1.3 and serves out 1.4-127 in DHCP and 128-250 in VPN

    Site 2 Serves out 2.2-127 in DHCP and 128-250 in VPN

    The firewall is open to all traffic on the 192.168.0.0/16 subnet and the main firewall only allows the Gateway setup essentials and VPN ISAKMP 500, VPN L2TP 1701 and 50-51 and 4500 i think because the VPN Needed them to connect.

    however when a user connects to VPN from afar they loose Network Connectivity

Viewing 2 posts - 1 through 2 (of 2 total)