Equipment Support > Hardware By Brand > Linksys > [VPN] BEFSX41 VPN Requirements

reply to jjsmd6

Re: [VPN] BEFSX41 VPN Requirements

Flogator:

It seems that when I run your command netstat -a

I get a series of 0.0.0.0 and a Host not found message.

Joe

Likely be a typo but just want to make sure instead of assuming anything. I have suggested the nbtstat command but in your reply, you have referred to netstat which is a valid command but not the one I was referring to.

If the nbtstat command fails it means that somewhere along the path that the traffic is not making its way through. I'm afraid that, assuming you did the configuration properly and still not getting NetBIOS through, the only way to debug this further is to do packet sniffing on both side of the setup. You can download Ethereal to do that.

Flogator:

It was a typo , the command is nbtstat.

I downloaded ethereal, it is quite confusing. Exactly what should I look for to see if netBIOS is getting through?

Thanks
Joe

Basically, you want to capture the sequence of event while doing the nbtstat command. If you are in any doubt, simply start Ethereal, do the nbtstat command and save the logs to a file. If you don't understand the logs, send me an instant message (IM) or a private mail (PM). I will then provide you my email address so you can send me a copy of your ethereal log file. I'll analyze it for you and provide you a conclusion. Just for sake of completeness, it would be nice to have the ethereal capture at both end.

Flogator:

Sorry for the delay, I was away on business.
Basically I have found the following:

I have the BEFSX41 configured at home to allow a VPN.
At work I have my computer running SSH Sentinel. I have sucessfully set up a VPN connection, but I cannot browse the network or access anything on the network.I have tried cahanging the NAT selection on SSH sentinel, but either way it fails.I gt "no host found" when I run nbtstat. I will email you the ethereal log of this attempt( as soon as you respond to your message.

What is interessting is the ofice computer is connected via Verizion DSL service. If I disable the network adapter and use my modem to connect to a dial up ISP (concentric) via the phone line, I then can sucessfuly get the VPN up AND browse the network although it is quite slow.This is using the same computer and SSH Sentinel settings.

I can email the log of this as well ( by the way even with the dial up ISP , I am getting "no host" on nbtstat.

Thanks
Joe

reply to Flogator

Re: BEFSX41 VPN Requirements

chartek, thanks for the information. Basically, I actually gave up on using the WinXP IPSec client. Instead I have used SSH Sentinel and it is working like a charm. Beside, configuring SSH Sentinel is way more trivial than it is with the WinXP IPSec client. I am always looking for multiple ways of doing things. As such, I'll keep your post around. Meanwhile, if you want to know how I can make the setup to work with SSH Sentinel, simply read through my document here.

reply to Eebbbee

Re: [VPN] BEFSX41 VPN Requirements

In my opinion, 1.45.6 is just as bad as 1.45.3. You did the right thing by flashing 1.45.7. FYI, some additional information was posted here.

Flogator, yea, I need the BEFSX41 to be the client in a sense because my apartment ISP only gives out unroutable ip's, so my WAN on the vpn router is 10.0.0.56. I needed to be able to connect to my work computer to establish the tunnel. I was able to make the connection by entering the public ip of my apartment ISP (the ip that shows up when I connect to something on the internet) into the Tunnel Setting of the "To LAN" rule.

The connection works, however now I'm experiencing connection loss on the vpn tunnel after a short period of time. I've tried different firmware versions...I'm using 1.44.11t right now. I've tried keep-alive, but it doesn't matter. The linksys vpn router says its connected but pings or any connections either way don't work. Will still keep troubleshooting. Thanks!

reply to Flogator
They're still behind the curve as usual. Props to whoever made the 1.45.7 firmware.

Now for the fun (Again). The SSH (from home) has stopped working with the befsx41 here at the apartment. Both ends say the tunnel is "up." However, nbtstat -a nor ping get through to either end. I have a 2nd tunnel from here back to the office (befvp41) that works ell so far. I'm on ADSL here and at the office. Home is on cable behind a linux router. Perplexing thing is that this setup worked last week, albeit a little flaky. Hopefully one of these days I'll get a better handle on things. On the upside... I do have 3 befsx41s stably linked to a befvp41. I just have to lick this software problem and must likely have to "upgrade" to SSH 1.4. Been getting the BSoD from 1.3 quite a bit when the LAN cable is unplugged before XP shuts down.

Flogator:

I might have some more information.
I was having the problem where I was able to bring up a tunnel from my remote office computer to my home router, but was unable to browse. I tried changing the LAN IP of my remote router from 192.168.1.1 to 192.168.0.1 because I knew my home router was set to 192.168.1.1 and I thought there might be a conflict there. Well after doing that I am now able to browse by using the specific computers IP address ( ie 192.168.1.115) but I am still unable to use the computers name nor does it show up in "network neighberhood" and the nbtstat command still gives me "host not found" but at least I am making some progress.

Joe

That's good information. That makes sense. I kind of assumed these type of things. Indeed, both LAN must be on a different subnet. Now if I understand properly, you have now moved one site on a different subnet and you are now getting some files and printer sharing. That's good. I'll follow up with you via email.

reply to Flogator

Re: [VPN] BEFSX41 VPN Requirements

reply to Flogator

Re: [VPN] BEFSX41 VPN Requirements

Hello!

Glad for you that it works but your post is a little cruel

How about giving us some details?

How did you get it working?

Thanks

EB

reply to Flogator
Flogator
After reading all the posts on this forum....I would like to know that "can I use the MS Remote Desktop client that comes with XP as Client for VPN. Instead of SSH Sentinel as you have advised..

Thanks

In theory you should be able to get it working. However, I can't comment much since I did not come around to experiment with the XP VPN client.

reply to Flogator
Nice information. They should put up a sticky for people to find this document. I would like to know what I can do about not being able to connect to a WRV54G. I am pretty sure it's a firmware problem. I have no clue what would happen if it gets sent to Linksys. I don't know if they forward it or just reply to me and drop the support. I have been able to make a VPN Tunnel from a dial-up but not behind a NAT router. WRT54G firmware 2.02.7 and Wi-Fi 2.08... something I forget. I get time out errors and the information does not seem to be able to get back to my VPN client.