Go Premium for a chance to win a PS4. Enter to Win

x
?
Solved

Cisco 837 ipsec VPN to Watchguard Firebox

Posted on 2008-06-24
4
Medium Priority
?
1,325 Views
Last Modified: 2013-11-16
Hi All,

I look after a Cisco 837 router for one of my clients.  It works perfectly, except recently i have been asked to set up a vpn to another office.  

The other office is running a Watchguard Firebox, but i have no control over it and I have no access to it.

The details they have given me are as follows:
External ip address of the other site - 84.xxx.xxx.xxx
Internal ip address of the router - 192.168.0.1
Internal ip address range - 192.168.0.xxx
Gateway name
Security association proposal type - ESP
Authentication - SHA-HMAC
Encryption - 3DES-CBC
Preshared key - $xxxxxxx$

I thought I had set up the router correctly as in Cisco SDM it shows the connection as being up, although I can't ping anything at the other side, nor can I access a terminal server at the other site.

The only thing that I can see that i have done differently is use 3DES encryption instead of 3DES-CBC encryption - are they the same thing?

If anyone could shed any light it would be much appreciated.  I am happy to post config files if they will be of assistance?

Thanks,
Richard
0
Comment
Question by:RichardA1984
  • 3
4 Comments
 

Author Comment

by:RichardA1984
ID: 21863486
I have attached the config file and upped the point to 500.  Any assistance really would be very helpful :-)

Thanks,
Richard.
Cisco837.txt
0
 
LVL 32

Expert Comment

by:dpk_wal
ID: 21864216
I would be able to help you with watchguard configuration; not too sure about cisco; i think 3des and 3des-cbc should be fine; can you post some logs which you are seeing or if possible from remote end. The logs would make it clear as to where the negotiations are failing.

Please do change two octets of all public IP addresses before posting anything.

Historically I have seen xauth to cause problem; if possible disable xauth on cisco and this should help.

Please check and update.

Thank you.
0
 

Author Comment

by:RichardA1984
ID: 21866081
Hi dpk_wal,

Thanks for your suggestion.  I have disabled xauth in the Cisco router, bcause i heard that it sometimes caused issues.

I have requested the logs from the other office, I will post them on here as soon as they are received!

Thanks for your help
Richard.
0
 

Accepted Solution

by:
RichardA1984 earned 0 total points
ID: 22267427
Hi,
Thanks for your help with this.  Ultimately I found out that the config was correct and the issue was with the watchguard at the other side.  Unfortunately i'm not sure of the exact problem with the watchguard as i don't administer it, although i belive it was a firewall related issue.

Thanks
Richard.
0

Featured Post

 The Evil-ution of Network Security Threats

What are the hacks that forever changed the security industry? To answer that question, we created an exciting new eBook that takes you on a trip through hacking history. It explores the top hacks from the 80s to 2010s, why they mattered, and how the security industry responded.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

To setup a SonicWALL for policy based routing to be used with the Websense Content Gateway there are several steps that need to be completed. Below is a rough guide for accomplishing this. One thing of note is this guide is intended to assist in the…
The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…

783 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question