В настройках использовались материалы

http://www.dlink.ru/technical/faq_vpn_18.php
http://www.dlink.ru/technical/faq_vpn_21.php
http://www.dlink.ru/technical/faq_vpn_4.php

Версия фирмваре 105

В логах вот такое ----->
как с этим бороться.

WAN Type: PPP over Ethernet (v1.05)
Wednesday August 24, 2005 08:32:34 Receive IKE M1(INIT) : x.x.x.232 --> x.x.x.193
Wednesday August 24, 2005 08:32:34 Try to match with ENC:3DES AUTH:PSK HASH:SHA1 Group:Others
Wednesday August 24, 2005 08:32:34 Try to match with ENC:3DES AUTH:PSK HASH:SHA1 Group:Group2
Wednesday August 24, 2005 08:32:34 Send IKE M2(RESP) : x.x.x.193 --> x.x.x.232
Wednesday August 24, 2005 08:32:34 receiving a re-Tx MM msg, response the last msg
Wednesday August 24, 2005 08:32:34 IKED re-TX : MM
Wednesday August 24, 2005 08:32:35 Receive IKE M3(KEYINIT) : x.x.x.232 --> x.x.x.193
Wednesday August 24, 2005 08:32:35 Send IKE M4(KEYRESP) : x.x.x.193 --> x.x.x.232
Wednesday August 24, 2005 08:32:35 receiving a re-Tx MM msg, response the last msg
Wednesday August 24, 2005 08:32:35 IKED re-TX : MM
Wednesday August 24, 2005 08:32:36 receiving a re-Tx MM msg, response the last msg
Wednesday August 24, 2005 08:32:36 IKED re-TX : MM
Wednesday August 24, 2005 08:32:36 Receive IKE M5(IDINIT) : x.x.x.232 --> x.x.x.193
Wednesday August 24, 2005 08:32:36 Send IKE M6(IDRESP) : x.x.x.193 --> x.x.x.232
Wednesday August 24, 2005 08:32:36 IKE Phase1 (ISAKMP SA) established : x.x.x.193 <-> x.x.x.232
Wednesday August 24, 2005 08:32:38 Receive IKE Q1(QINIT) : [x.x.x.232]-->[x.x.x.193]
Wednesday August 24, 2005 08:32:38 SPD : add dynamic user [x.x.x.193]<->[172.20.48.25] OK
Wednesday August 24, 2005 08:32:38 Requested routing is [172.20.48.25|x.x.x.232]<->[x.x.x.193|x.x.x.193]
Wednesday August 24, 2005 08:32:38 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:38 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:38 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:38 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:38 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:38 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:38 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:38 Try to match ESP with MODE:Transport PROTOCAL:Others AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:Others AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:ESP-DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:Others AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match ESP with MODE:Transport PROTOCAL:Others AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:39 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:40 Receive IKE Q1(QINIT) : [x.x.x.232]-->[x.x.x.193]
Wednesday August 24, 2005 08:32:40 Requested routing is [172.20.48.25|x.x.x.232]<->[x.x.x.193|x.x.x.193]
Wednesday August 24, 2005 08:32:40 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:40 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:40 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:40 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:41 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE

Что настроено неправильно????

Проблемы с настройкой параметров второй фазы. Проверьте что предлагает удаленная сторона и есть ли такое в списке пропозалов второй фазы.

_________________
С уважением -- Александр Шебаронин.

Проверять на стороне ХР или 824VUP????

Прорверка ни к чему ни превела

Wednesday August 24, 2005 08:32:40 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:40 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:40 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Wednesday August 24, 2005 08:32:40 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:SHA1 HASH:Others PFS(Group):NONE
Wednesday August 24, 2005 08:32:41 Try to match ESP with MODE:Transport PROTOCAL:ESP-3DES AUTH:MD5 HASH:Others PFS(Group):NONE


так все и осталось
волнует только вот это HASH:Others PFS(Group):NONE

Удаленная сторона не включает PFS. Либо надо как то ее об этом попросить, либо выключить PFS и на устройстве.

_________________
С уважением -- Александр Шебаронин.

1. Включили PFS
2. Попробовали ping - negotiating ip security - пинг отсуствует
3. Создали в сетевом окружении новое подключение к VPN подключение не произошло - появился данный лог.


Thursday August 25, 2005 15:28:30 Requested routing is [172.23.170.184|x.x.x.232]<->[x.x.x.193|x.x.x.193]
Thursday August 25, 2005 15:28:30 Try to match ESP with MODE:Transport PROTOCAL:Others AUTH:SHA1 HASH:Others PFS(Group):NONE
Thursday August 25, 2005 15:28:30 Try to match ESP with MODE:Transport PROTOCAL:Others AUTH:MD5 HASH:Others PFS(Group):NONE
Thursday August 25, 2005 15:28:30 Try to match AH with MODE:Transport PROTOCAL:AH-SHA1 AUTH:SHA1 HASH:Others PFS(Group):Others
Thursday August 25, 2005 15:28:30 Try to match AH with MODE:Transport PROTOCAL:AH-MD5 AUTH:MD5 HASH:Others PFS(Group):Others
Thursday August 25, 2005 15:28:57 Receive IKE INFO : x.x.x.232 --> x.x.x.193
Thursday August 25, 2005 15:28:57 Receive IKE (INFO) : delete x.x.x.232 -> x.x.x.193 phase 1
Thursday August 25, 2005 15:28:57 Send IKE (INFO) : delete [x.x.x.193|x.x.x.193]-->[x.x.x.232|172.23.170.184] phase 2
Thursday August 25, 2005 15:28:57 IKE phase2 (IPSec SA) remove : x.x.x.193 <-> 172.23.170.184
Thursday August 25, 2005 15:28:57 inbound SPI = 0x0, outbound SPI = 0x0
Thursday August 25, 2005 15:28:57 Send IKE (INFO) : delete x.x.x.193 -> x.x.x.232 phase 1
Thursday August 25, 2005 15:28:57 IKE phase1 (ISAKMP SA) remove : x.x.x.193 <-> x.x.x.232

при пинге в логах 824 пусто
???? возможно нехватает маршрутизации???

Очень странно... Почему у вас устанавливается транспортный режим? Должен быть туннельный.

_________________
С уважением -- Александр Шебаронин.

Судя по логам PFS не включился.

_________________
С уважением -- Александр Шебаронин.

Вот добились следующего!!!

Имеем при пинге тайм аут, имеем на д-линке в статусе vpn конекшен - Establishing - комп не пингуется соединение не устанавливается.

C помощь проги TheGreenBow VPN соединение устанавливается dlink говорит что все ок - пинги неидут сети невидно.
Видать неправильная маршрутизация.