FVS338 VPN Policy Enable Failed or mode conf errors

[hansn]

After modifying some IKE-policy-parameters I cannot enable the according vpn-policy any more; it shows "VPN Policy Enable Failed"; sometimes I get "mode conf"-error too. It is a FVS338 with actual v3.0.2-21. I think about going back to the latest v1-firmware. Any idea?

[jmizoguchi]

you may want to create new policy instead. I would not go back to 1.x.x firmware. if you have just upgraded. you may want to hard reset

[hansn]

I tried creating new policies; creating the ike-policy works, but by saving/applying a new vpn-policy I get a "Loading Conf Failed"-error. Have you experience, that this is durable solved after a hard-reset? Is the v3-firmware really reliable in your opinion?

[jmizoguchi]

338 has pre-share key issue on reboot (on/off) with key will show "****" so you may need to use prior version from the newest one.

hard reset can clear the some issues I would try that.. you can back up restore and try. if still have issue hard reset again and manually setup all up on router setting.. some back up and restore bad configuration

[hansn]

I found a solution!!! I reduced the PSK-stringlength to nine characters, rebooted the rooter and all works well! Without hardreset. Maybe the "****"-problem is also related to long psk's. I can remember, there was a psk-length-problem with the fvs338 in the year 2006 too; the problem in 2006 was, you never can establish a vpn-connection. To me it seems, Netgear has a psk-length-problem since years... if so, it is a shame...

[beisser]

Originally Posted by hansn

Maybe the "****"-problem is also related to long psk's.

its not related to psk length.

[hansn]

I can not say, the '****'-problem is related to the psk-length, because I never had this problem seen on my FVS338s; but the "Policy Enable Failed" or "load conf" - errors are solved with short psks in my case; OK, I have to watch this the next days, but before shortening the PSKs I rebooted the router lots of times and tried lots of configurations without success. After shortening, all works well!? I've no reason to lie.

[beisser]

there should be a new firmware out soon™. it will contain various fixes on PSK's and other vpn-related stuff.

[beisser]

Originally Posted by hansn

I've no reason to lie.

i dont say you lie.. but i tell you it (the ****-issue) has nothing to do with psk-length. there is no need for discussion there.

[hansn]

New FW inside april?