lorennerol
Premium
join:2003-10-29
Seattle, WA | Greenbow and Vista/Win7 issues
Have setup a Z5 for IPSec and can connect with Greenbow on Windows XP. Can ping and access resources by IP, as expected.
Same config on Vista and Win7 will build tunnel, but cannot ping or access resources.
Any advice? |
|
lorennerol
Premium
join:2003-10-29
Seattle, WA | Following up my own post to add: It's an issue with the Vista and Win7 firewall: If I disable the firewall all is good. But I'll be darned if I can find what to unblock. I'm running Win7. |
|
Bwuutje
join:2005-01-10 | The Windows firewall ? Erhmm..outgoing UDP ports 500 and 4500, ESP protocol. And perhaps the remote ip subnet ?
Bwuutje. |
|
lorennerol
Premium
join:2003-10-29
Seattle, WA | It worked in Win7 when I added an exception for the remote subnet. I setup a VM with Vista (no more Vista boxes here, thank goodness) and that seemed to work okay without the firewall rule. So I think the Vista issue is specific to one PC.
L |
|
claykin
join:2003-08-22
Fort Lauderdale, FL
 ·Comcast
1 edit | reply to lorennerol
What version of Greenbow are you running? If V4.2 or higher the software should have made the necessary entries in the Vista firewall during installation. Check your Greenbow version and upgrade to current.
See here:
»www.thegreenbow.com/vpn_faq.html#tblsh17 |
|
lorennerol
Premium
join:2003-10-29
Seattle, WA | 4.61.003 |
|
nicarus
join:2009-11-06 | reply to lorennerol
In Windows 7 You don't need any client to connect by VPN to Zywall , it's built in Windows 7 |
|
lorennerol
Premium
join:2003-10-29
Seattle, WA
| said by nicarus  :In Windows 7 You don't need any client to connect by VPN to Zywall , it's built in Windows 7 Yes, it's been built into every NT-branch version of Windows since Windows 2000, it's just not practical to use because it's so complicated to setup and, at least up through XP, doesn't support dynamic IPs on the client side.
Greenbow does work with Win7. The orginal issue turned out to be specific to one PC. |
|
nicarus
join:2009-11-06
| reply to lorennerol
Sorry but I don't understand, why it's complicated?
You have to make maybe 10 moves and you have connection to your Zywall. Earlier I used to open a connection in software like GreenBow or other but now it simplier.
For example I have Zywall 35 in my work and after work i go home and in home i boot my notebook and that's all , I'm in a work network with my home ISP, nothing to do, even if I change my ISP to mobile ISP it works too. |
|
dslp_anon
@getinternet.no | reply to lorennerol
Well in 2k and XP it was not a trivial task to do it, if its easier to do it in Win7, I am sure many here would be grateful if you posted an example with your 10 steps. |
|
jdmt
Premium
join:2002-05-06
Seattle, WA
| reply to lorennerol
Don't know if you figured this out already, but I had the same issue on Vista. Here's how I addressed it, without disabling the firewall completely:
Go to Control Panel / Administrative Tools and open Windows Firewall with Advanced Security
Make sure that Port 500 inbound is set to allow for all hosts. The install should have added a couple of ZyWall IPSec rules for this.
If you want to beable to receive Ping Responses, make sure ICMPv4-In is set to allow...there should be a rule called "File and Printer Sharing (Echo Request - ICMPv4-In)" containing this policy.
Once I got all of the firewall issues dealt with, VPN has worked great on my Vista laptop... |
|
