<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.10.3">
</HEAD>
<BODY>
On Wed, 2006-09-27 at 10:35 +0200, Francesco Peeters wrote:
<BLOCKQUOTE TYPE=CITE>
<PRE>
<FONT COLOR="#000000">On Wed, September 27, 2006 09:40, Bas Driessen wrote:</FONT>
<FONT COLOR="#000000">> On Wed, 2006-09-27 at 08:58 +0200, Francesco Peeters wrote:</FONT>
<FONT COLOR="#000000"><SNIP></FONT>
<FONT COLOR="#000000">>> You'd also need to have the SNWL logs to knoe why it doesn't complete</FONT>
<FONT COLOR="#000000">>> phase 2</FONT>
<FONT COLOR="#000000">>></FONT>
<FONT COLOR="#000000">>> Also you'll need more info on the SNWL side, including what version of</FONT>
<FONT COLOR="#000000">>> OS</FONT>
<FONT COLOR="#000000">>> they are using</FONT>
<FONT COLOR="#000000">>></FONT>
<FONT COLOR="#000000">>> Lastly, if they have a halfway decent version, you will *not* be able to</FONT>
<FONT COLOR="#000000">>> use the GroupVPN SA, as that will require the SNWL VPN Client!...</FONT>
<FONT COLOR="#000000">>></FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> Thanks Francesco. Will request the log files from the administrator.</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> Can you please clarify GroupVPN SA versus VPN Client? All I need is a</FONT>
<FONT COLOR="#000000">> VPN client connection. If there is a different package that is easy to</FONT>
<FONT COLOR="#000000">> set up on Linux, that is the thing I want.</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> Bas.</FONT>
<FONT COLOR="#000000">></FONT>
<FONT COLOR="#000000">> ___</FONT>
<FONT COLOR="#000000">In more recent firmwares, the GroupVPN is set up for use with the</FONT>
<FONT COLOR="#000000">SonicWALL Global VPN Client (GVC).</FONT>
<FONT COLOR="#000000">AFAIK, the GroupVPN can *only* be used with the GVC, due to stuff like</FONT>
<FONT COLOR="#000000">Client Enforcing and Profile Distribution mechanisms in the SNWL box,</FONT>
<FONT COLOR="#000000">unless all the enhanced GVC features are turned off in the box, and even</FONT>
<FONT COLOR="#000000">then I'm not sure whether it'll work...</FONT>
<FONT COLOR="#000000">Older versions (And that excludes anything that runs SonicOS) will be able</FONT>
<FONT COLOR="#000000">to use the GroupVPN, but you'll need to have a firmware that predates the</FONT>
<FONT COLOR="#000000">GVC!</FONT>
<FONT COLOR="#000000">AFAIK the GVC is only available for Windows and Windows Mobile...</FONT>
<FONT COLOR="#000000">In newer firmware you will need to use a separate 'box to box' vpn SA...</FONT>
</PRE>
</BLOCKQUOTE>
Thanks Francesco. On the sonicwall.com web site, there are documents as follows:<BR>
<BR>
<A HREF="http://www.sonicwall.com/support/pdfs/technotes/SonicOS_Enhanced_to_Openswan_Using_GroupVPN_with_XAUTH.pdf">http://www.sonicwall.com/support/pdfs/technotes/SonicOS_Enhanced_to_Openswan_Using_GroupVPN_with_XAUTH.pdf</A><BR>
<A HREF="http://www.sonicwall.com/support/pdfs/technotes/SonicOS_Enhanced_to_Openswan_Using_Main_Mode_IKE_with_PreShared_key.pdf">http://www.sonicwall.com/support/pdfs/technotes/SonicOS_Enhanced_to_Openswan_Using_Main_Mode_IKE_with_PreShared_key.pdf</A><BR>
<A HREF="http://www.sonicwall.com/support/pdfs/technotes/SonicOS_Enhanced_to_Openswan_Using_Aggressive_Mode_IKE_with_PreShared_key.pdf">http://www.sonicwall.com/support/pdfs/technotes/SonicOS_Enhanced_to_Openswan_Using_Aggressive_Mode_IKE_with_PreShared_key.pdf</A><BR>
<BR>
This indicates to me that OpenSwan can be used using GroupVPN, Main Mode and Agressive Mode. Also since I am so close of having a VPN connecting using OpenSwan (as in my original posting), I do believe that a connection is possible with OpenSwan. Will gather the info from the other side and hopefully that generates some new ideas.<BR>
<BR>
Bas.<BR>
<BR>
<BR>
</BODY>
</HTML>