288 reputation
112
bio website
location
age
visits member for 4 years, 6 months
seen Oct 18 '13 at 18:57

Jul
2
awarded  Curious
Apr
27
awarded  Popular Question
Oct
15
awarded  Popular Question
Oct
2
awarded  Nice Answer
Apr
17
awarded  Popular Question
Oct
16
awarded  Tumbleweed
Jul
14
awarded  Commentator
Jul
14
comment IKE Phase 1 Aggressive Mode exchange does not complete
As I said, I don't think ISP restrictions are the problem here -- in similar setups I have seen UDP port 500 (ISAKMP) packets get through in both directions. I was told to try Aggressive Mode, so here I am -- but IKE Phase 1 is still failing half-way through.
Jul
14
revised IKE Phase 1 Aggressive Mode exchange does not complete
put my domain back into ipsec.conf
Jul
13
comment Understanding ipsec with NAT and dynamic IP's
I've started a new question specifically regarding using Aggressive Mode IKE with PSK: serverfault.com/questions/407667/… Any ideas on that one?
Jul
13
asked IKE Phase 1 Aggressive Mode exchange does not complete
Jul
13
comment ipsec IKE phase 1 failure
The PSK is definitely the same on either end. Maybe the encryption keys exchanged in the second exchange don't agree. Do the IP addresses go into creating those encryption keys? Maybe the right side is using its internal (NAT'ed) IP and the left side is using the right side's public IP?
Jul
13
revised ipsec IKE phase 1 failure
fix bad grammar
Jul
13
asked ipsec IKE phase 1 failure
Jul
13
comment Understanding ipsec with NAT and dynamic IP's
Why is aggressive mode necessary?
Jul
13
comment Understanding ipsec with NAT and dynamic IP's
Sounds nice, but I've got a wireless gateway here that only supports IPSec. The plan was to swap out test2 with the gateway once I've got the tunnel working. So I'm kind of stuck with IPSec until I get fed up and buy a different gateway.
Jul
12
awarded  Yearling
Jul
12
asked Understanding ipsec with NAT and dynamic IP's
May
12
comment smbd won't start or stop when user is elevated to root by SUID bit
OK, fair enough.
May
12
awarded  Scholar