Comments
-
I found the issue: IP reputation filter has blocked my provider's IP address. Unfortunately, all these security packs coming with new Flex firewalls can drive you crazy…
-
Hi Peter No I'm using my provider's mail server. But now I tried my own mail server, and yes, it works!! So this must be an issue on my provider's side. Anyway, the ZyWall mails are normal plain HTML mails. And even no NDR's are coming back.
-
Yes, all these parameters are OK. Now I've found a solution that's working for me: I installed a trial version of TheGreenBow VPN Client. They use AES-256,SHA-512,DH14 (much safer than old and outdated DH2 and SHA-1!). And guess what? It works perfectly! So I'm gonna using this client and forget the annoying one of…
-
Forgot to mention that my company.com address is registered at DynU. So that's why the Laptop finds the way to the ZyWall's WAN port.
-
I''ve made a certificate as shown in the article (link in post # 1). I've got another paid certificate, but it is a wildcard cert(*.company.com). *-certs can't be used in the parameter field "Certificate" in the Tunnel specs. So the self made cert has the name "www.company.com". ("company" is placeholder for real value).…
-
My configurations are as follows. VPN-Gateway-Settings: Name: IKEV2_Tunnel Interface: wan1 Dynamic Address Authentication: Certificate Peer ID Type: Any **Phase1 Settings: SA Life Time:86400 Proposal: 1 3DES SHA1 2 AES128 MD5 3 AES128 SHA256 Key Group: DH2 Exxtended Auth: Server Mode AAA Method: default Allowed User:…
-
Update: Using AES128 SHA256 instead of AES128 SHA1 seems to be the solution for Phase1 now beeing OK. Anyway I see not entries in the log for Phase2 (good or bad..?), still no connection gets established. 490 2024-12-03 14:17:11 xxxxxxxxxxxx:43655 xxxxxxxxxxxxxxx:500 info ike IKE_LOG The cookie pair is : 0xd8ce2f7b7c4c423a…
-
Hello PeterUK This was not so helpful. I know about the User Guides. But the Web-Helps lead directly to the correct position in the manual. So this *has to* work, because it is a feature!