XP VPN Client To Symantec VPN 100 Appliance

[Matt Lavigne]

XP VPN Client To Symantec VPN 100 Appliance

Has anyone here ever done it... is it possible or do you
need to use symantec's VNP client software.

Thanks!

 

[Bill Sanderson]

I looked a bit at Symantec's web docs.

http://enterprisesecurity.symantec.com/content/displaypdf.cfm?pdfid=82

seems to indicate that this box doesn't do remote client to gateway
VPN's--that you need a 200R box to do that.

I know nothing about these critters except what I just looked at, so take
this with a grain of salt.

 

[Matt Lavigne]

I saw that too...

The users guide for the device says you can to client to
gateway VPN. when I use the XP VPN client I get these
error's in the log of the appliance.

08/31/2004 23:53:51.35 matt - responding to Main Mode
from Road Warrior "ip address"

08/31/2004 23:53:51.35 matt - ERR: invalid value 14 for
attribute OAKLEY_GROUP_DESCRIPTION in Oakley Transform

08/31/2004 23:53:51.35 matt - STATE_MAIN_R1:
ATTRIBUTES_NOT_SUPPORTED

08/31/2004 23:53:51.35 matt - state transition function
for STATE_MAIN_R0 failed: ATTRIBUTES_NOT_SUPPORTED

08/31/2004 23:53:51.35 matt - Sending ISAKMP OAK INFO
(Notification IKE SA)

08/31/2004 23:53:51.35 matt - Terminating connection

08/31/2004 23:53:51.35 matt - Terminating connection

I know this is a long shot but I figured it couldn't hurt
to ask...

Thanks!

 

[Bill Sanderson]

I probably shouldn't have responded--hope somebody actually using the device
spots the thread. You might post in one of the server-related groups where
folks with larger networks that might be using this device for branch-office
connectivity may hang out.

I can't tell what those errors might mean--the requirement for a proprietary
client (or at least a client with very specific settings) could easily be
the explanation.

 

[Matt Lavigne]

Bill... thanks for your response It's always helpful to
get another point of view.

Matt