L2TP VPN w/ certs Help

JuniperForum.com

September 09, 2010, 02:18:33 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News: If you have an interesting idea for an article or knowledgebase entry, please submit it!

Home

Help

Latest Knowledgebase Articles

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

JuniperForum.com > Security > NetScreen and SSG VPN > Topic: L2TP VPN w/ certs Help

Pages: [1]

« previous next »

Author

Topic: L2TP VPN w/ certs Help (Read 960 times)

pnauroth

Newbie

Posts: 37

L2TP VPN w/ certs Help

« on: February 24, 2003, 09:53:28 AM »

This is very frustrating... angry

I was informed by Netscreen (Tech Support) that in order to VPN 5XP (static IP) and a W2k dialup (dynamic IP) for L2TP that I need to configure the 5XP(OS 4.0) and W2k client for L2TP over IPSEC with certificates. No problem.

They provided me with doc VPN-400-003 to perform this service. I was able to install certificate services on our W2K server to issue certs. I followed the instructions to the "T" but I am unable to connect to the untrusted interface and the VPN continues to time-out indicating no response from the destination. I checked the event logs and their are no entries for a P1 proposal or any entry of a VPN attempt. What am I doing wrong? Any help will be GREATLY appreciated. Thanks all.

Paul


	Logged

Florent

Hero Member

Posts: 1089

L2TP VPN w/ certs Help

« Reply #1 on: February 24, 2003, 03:29:45 PM »

use snoop or debug flow to be sure the win2k client is trying to connect to the NS box.

If yes, try debug l2tp to see what is wrong in the negociation