Has anyone sucessfully connected to a Windows Azure Virtual network using a Netgear router?
I am attempting to connect to a Windows Azure virtual network using a Netgear FVS318G VPN firewall router. I am able to create a 49 character pre-shared key (limitation on the Netgear router) thanks to code that I found on the internet. After reviewing the templates that are provided for Cisco and Juniper routers, I put similar settings into the Netgear router. I am receiving time up errors for Phase 1 and Phase 2 negotiations.
The virtual network I setup follows the example in the tutorials: •FrontEnd: 10.4.2.0/24 •BackEnd: 10.4.3.0/24 •ADDNS: 10.4.4.0/24 •DNSServer: 10.1.0.21 •Gateway: 10.4.1.0/24 •On premise network: 10.1.0.0/24
In the router, I set up the IKE proposal to point to our public IP address and the public IP address presented by the Virtual Network configuration. and the IPSec between the on-premise network, 10.1.0.0/24, and the gateway network, 10.4.1.0/24.
In the proposals, I used AES128, SHA1, Group2 and dead peer detection.
Here is a sample of the messages from the router VPN log. Messages are in descending time sequence.
2012 Aug 9 19:56:50 [FVS318g] [IKE] Could not find configuration for 126.96.36.199_
2012 Aug 9 19:56:30 [FVS318g] [IKE] Phase 1 negotiation failed due to time up for 188.8.131.52. 696cb5bec1f28e81:0000000000000000_
2012 Aug 9 19:56:01 [FVS318g] [IKE] Phase 2 negotiation failed due to time up waiting for phase1. _
2012 Aug 9 19:56:01 [FVS318g] [IKE] Invalid SA protocol type: 0_
2012 Aug 9 19:55:40 [FVS318g] [IKE] Could not find configuration for 184.108.40.206_
2012 Aug 9 19:55:30 [FVS318g] [IKE] Setting DPD Vendor ID_ 2012 Aug 9 19:55:30 [FVS318g] [IKE] Beginning Identity Protection mode._
2012 Aug 9 19:55:30 [FVS318g] [IKE] Initiating new phase 1 negotiation: 220.127.116.11<=>18.104.22.168_
2012 Aug 9 19:55:30 [FVS318g] [IKE] Configuration found for 22.214.171.124._
2012 Aug 9 19:55:25 [FVS318g] [IKE] accept a request to establish IKE-SA: 126.96.36.199_
2012 Aug 9 19:55:25 [FVS318g] [IKE] Adding IKE configuration with identifer "MP2CCloudNetwork"_
2012 Aug 9 19:55:25 [FVS318g] [IKE] Adding IPSec configuration with identifier "MP2CCloudNetwork"_