[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

isakmpd and sentinel vpn client



I can sucessfully establish a vpn with a win2k client outside of my network,
but unable to see the internal network from the win2k client.  However I can
ping the internal interface of the bsd box, and the bsd box can ping client.

|wink2k-client|-----|internet|----->|openbsd 3.1box|-----|internal net|

My isakmpd.conf:

[Phase 1]
Default= ISAKMP-clients

[Phase 2]
Passive-Connections= IPsec-clients

[ISAKMP-clients]
Phase= 1
Configuration= Sentinel-main-mode
Authentication= mypassword

[IPsec-clients]
Phase= 2
Configuration= Sentinel-quick-mode
Local-ID= Local-net
Remote-ID= Remote-host

[Local-net]
ID-type= IPV4_ADDR_SUBNET
Network= 192.168.0.0
Netmask= 255.255.255.0

[Remote-host]
ID-type= IPV4_ADDR
Address= 0.0.0.0

[Sentinel-main-mode]
EXCHANGE_TYPE= ID_PROT
Transforms= 3DES-SHA

[Sentinel-quick-mode]
EXCHANGE_TYPE= QUICK_MODE
Suites= QM-ESP-3DES-SHA-SUITE

My isakmpd.policy

Authorizer: "POLICY"
Conditions: app_domain == "IPsec policy" &&
                esp_present == "yes" &&
                esp_enc_alg != "null" -> "true";


I am using SSH sentinel 1.3.2 on the win2k client.  I also specified a local
address in the properties of the connection, labeled "Acquire virtual IP
address"

Can somebody give me something to troubleshoot!  I cant figure it out :(  My
goal is obviously be able to access resources on the remote network.