The Following User Says Thank You to imagomundi For This Useful Post: | ||
![]() |
2012-08-30
, 09:50
|
|
Posts: 122 |
Thanked: 135 times |
Joined on Dec 2009
@ Helsinki
|
#32
|
Thx for the flowers
I don't have an Android device at hand for a few weeks. Maybe it is possible you have a look at it yourself? The user in the IPPhone-Forum said that he used a vpnc client downloaded from android market which he altered in the way I described before.
Unfortunately my local time is 7,5 hrs. behind Helsinki - so I can only answer when it is midnight or even later in Helsinki and it will always take two full days to post and answer. I try to speed this up a little answering from my office's PC.
I would guess one or the other problem and therefore ask:
1. What is the IPSec ID? I never saw such a data in none of my working NOKIA (Symbian) vpn clients and I do not see it in the vpn server's (FRITZBox) configuration either.
2. Is "IKE DH Group dh2" identical with "GROUP_DESCRIPTION_II: MODP_1024" or/and "GROUP_DESCRIPTION: MODP_1024" as in the working Nokia vpn client's configuration?
I will post the 701's vpn client config later
3. "Domain" is the DDNS domain of the gateway? If my gateway is "My.dyndns.org" the domain is "dyndns.org"?
Finally: I read somewhere that the use of @ is not allowed in a vpnc user name? False or true?
The Following User Says Thank You to too For This Useful Post: | ||
![]() |
2012-08-30
, 10:41
|
Posts: 13 |
Thanked: 8 times |
Joined on Jun 2012
|
#33
|
Anyway, I'll compile a vpnc binary where
IKE_ATTRIB_LIFE_DURATION = 3600 (instead of 2147483)
and draft-ietf-ipsec-nat-t-ike-03 code is patched in place
of draft-ietf-ipsec-nat-t-ike-02. Whenever I get it done
I put it avalable somewhere -- let's hope that is enough
to solve this issue.
![]() |
2012-08-30
, 11:56
|
|
Posts: 122 |
Thanked: 135 times |
Joined on Dec 2009
@ Helsinki
|
#34
|
The Following 2 Users Say Thank You to too For This Useful Post: | ||
![]() |
2012-08-30
, 18:36
|
Posts: 13 |
Thanked: 8 times |
Joined on Jun 2012
|
#35
|
The Following User Says Thank You to imagomundi For This Useful Post: | ||
![]() |
2012-08-31
, 20:38
|
Posts: 509 |
Thanked: 626 times |
Joined on Jul 2012
@ Mexico/Germany
|
#36
|
![]() |
2012-09-01
, 03:38
|
Posts: 13 |
Thanked: 8 times |
Joined on Jun 2012
|
#37
|
enabled = yes; conn_type = conntype_user; name = "name@name"; always_renew = no; reject_not_encrypted = no; dont_filter_netbios = yes; localip = 0.0.0.0; local_virtualip = 0.0.0.0; remoteip = 0.0.0.0; remote_virtualip = 192.168.174.202; remoteid { key_id = "name@name"; } mode = phase1_mode_aggressive; phase1ss = "all/all/all"; keytype = connkeytype_pre_shared; key = "keykeykeykey"; cert_do_server_auth = no; use_nat_t = yes; use_xauth = yes; xauth { valid = yes; username = "name@name"; passwd = "passwordpassword"; } use_cfgmode = yes; phase2localid { ipnet { ipaddr = 0.0.0.0; mask = 0.0.0.0; } } phase2remoteid { ipaddr = 192.168.174.202; } phase2ss = "esp-all-all/ah-all/comp-all/no-pfs"; accesslist = "permit ip 192.168.174.0 255.255.255.0 192.168.174.202 255.255.255.255", "permit ip any 192.168.174.202 255.255.255.255"; VPN9C : Gateway: mein.dyndns.org Group Name: name@name Group Pwd: keykeykeykey Username: name@name Password: passwordpassword
![]() |
2012-09-03
, 12:22
|
|
Posts: 122 |
Thanked: 135 times |
Joined on Dec 2009
@ Helsinki
|
#38
|
![]() |
2012-09-06
, 03:19
|
Posts: 8 |
Thanked: 1 time |
Joined on Nov 2011
|
#39
|
![]() |
2012-09-07
, 13:11
|
|
Posts: 122 |
Thanked: 135 times |
Joined on Dec 2009
@ Helsinki
|
#40
|
Unfortunately my local time is 7,5 hrs. behind Helsinki - so I can only answer when it is midnight or even later in Helsinki and it will always take two full days to post and answer. I try to speed this up a little answering from my office's PC.
I would guess one or the other problem and therefore ask:
1. What is the IPSec ID? I never saw such a data in none of my working NOKIA (Symbian) vpn clients and I do not see it in the vpn server's (FRITZBox) configuration either.
2. Is "IKE DH Group dh2" identical with "GROUP_DESCRIPTION_II: MODP_1024" or/and "GROUP_DESCRIPTION: MODP_1024" as in the working Nokia vpn client's configuration?
I will post the 701's vpn client config later
3. "Domain" is the DDNS domain of the gateway? If my gateway is "My.dyndns.org" the domain is "dyndns.org"?
Finally: I read somewhere that the use of @ is not allowed in a vpnc user name? False or true?
Last edited by imagomundi; 2012-08-29 at 17:48.