Hello,
I have an Untangle firewall and I cannot get IPsec to connect from a windows 10 machine.
I have bought licenses and enabled IPsec. Setup the secret key/local directory and setup my Windows Devices correctly as per the Untangle Documentation.
When I try connecting a Windows machine it just sits there saying "Connecting to x.x.x.x" then after 2 minutes errors with "The l2tp connection attempt failed because the security layer encountered a processing error during initial negotiations with the remote computer"
If however I try to connect from INSIDE the network (internal adaptor) it connects fine?
Running a packet trace on port 500 when trying to connect from external (when it fails) I get the following result (Firewall IP hidden)
15:32:34.519240 IP 94.197.120.174.53682 > x.x.x.x.500: isakmp: phase 1 I ident
15:32:34.520934 IP x.x.x.x.500 > 94.197.120.174.53682: isakmp: phase 1 R ident
15:32:35.380240 IP 94.197.120.174.53682 > x.x.x.x.500: isakmp: phase 1 I ident
15:32:35.380904 IP x.x.x.x.500 > 94.197.120.174.53682: isakmp: phase 1 R ident
15:32:36.380232 IP 94.197.120.174.53682 > x.x.x.x.500: isakmp: phase 1 I ident
15:32:36.380838 IP x.x.x.x.500 > 94.197.120.174.53682: isakmp: phase 1 R ident
15:32:39.410182 IP 94.197.120.174.53682 > x.x.x.x.500: isakmp: phase 1 I ident
15:32:39.410810 IP x.x.x.x.500 > 94.197.120.174.53682: isakmp: phase 1 R ident
Connecting to the VPN while on the internal network gives this result
15:34:52.123596 IP 10.31.11.163.500 > x.x.x.x.500: isakmp: phase 1 I ident
15:34:52.125217 IP x.x.x.x.500 > 10.31.11.163.500: isakmp: phase 1 R ident
15:34:52.126323 IP 10.31.11.163.500 > x.x.x.x.500: isakmp: phase 1 I ident
15:34:52.136917 IP x.x.x.x.500 > 10.31.11.163.500: isakmp: phase 1 R ident
15:34:52.138139 IP 10.31.11.163.500 > x.x.x.x.500: isakmp: phase 1 I ident[E]
15:34:52.139015 IP x.x.x.x.500 > 10.31.11.163.500: isakmp: phase 1 R ident[E]
15:34:52.140239 IP 10.31.11.163.500 > x.x.x.x.500: isakmp: phase 2/others I oakley-quick[E]
15:34:52.140923 IP x.x.x.x.500 > 10.31.11.163.500: isakmp: phase 2/others R oakley-quick[E]
15:34:52.141585 IP 10.31.11.163.500 > x.x.x.x.500: isakmp: phase 2/others I oakley-quick[E]
Anyone able to help me resolve?
Thanks
Nick