Avatar of LeviDaily
LeviDaily
Flag for United States of America asked on

Vyatta & Adtran IPSEC VPN Help

I have a Vyatta instance running in Amazon EC2. I have an Adtran router at our office on our Comcast internet connection. I am wanting to create a site to site vpn with the two.

My Adtran router public IP is 173.12.191.XXX & internal is 192.168.0.1
My Vyatta (Amazon Elastic IP) is 50.18.193.XXX & eth0 ip is 10.243.175.10

I have the site to site VPN configured and am getting the IKE UP and IPSEC down. I am not too sure where to start. On the Vyatta when I run "show vpn debug peer 173.12.191.XXX tunnel 1" and am getting the below error


vyatta@VyattaAMI:~$ show vpn debug peer 173.12.191.XXX tunnel 1
000 "peer-173.12.191.XXX-tunnel-1": 10.243.175.0/24===10.243.175.10[10.243.175.10]...173.12.191.XXX[173.12.191.XXX]===192.168.0.0/24; unrouted; eroute owner: #0
000 "peer-173.12.191.XXX-tunnel-1":   ike_life: 28800s; ipsec_life: 28800s; rekey_margin: 540s; rekey_fuzz: 100%; keyingtries: 0
000 "peer-173.12.191.XXX-tunnel-1":   policy: PSK+ENCRYPT+TUNNEL+UP; prio: 24,24; interface: eth0;
000 "peer-173.12.191.XXX-tunnel-1":   newest ISAKMP SA: #0; newest IPsec SA: #0;
000 #67: "peer-173.12.191.XXX-tunnel-1" STATE_MAIN_I3 (sent MI3, expecting MR3); EVENT_RETRANSMIT in 13s
000 #67: pending Phase 2 for "peer-173.12.191.XXX-tunnel-1" replacing #0


Not too sure where to start, but feel like I am close?? If anyone can let me know what I need to do, I will gladly do it.
VPNRoutersInternet Protocol Security

Avatar of undefined
Last Comment
LeviDaily

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
Steve Jennings

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
SOLUTION
LeviDaily

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
LeviDaily

ASKER
I had to figure it out. I do appreciate the additional help.
Your help has saved me hundreds of hours of internet surfing.
fblack61