need help with fvs338=>iphone/4 vpn

[r_broberg]

Originally Posted by MrWichtig

Hi,

i also have the FVS338 Router and have many days spent for Troubleshooting the problem Iphone 4 (OS 4.3) connected with IPsec to the FVS338 but no Routing to any local ip adress is possible. But now i've finally solved the problem, but i don't know why now it works!

First, the "How To" from vpncaesstudy.com helped me for the basic Configuration. (Thx a lot, this explains everything very well !)


my local IP Range is 192.168.1.0/ 24 (Router IP 192.168.1.253)

i always have use a 10.10.10.1 - 10.10.10.5 Pool (first pool) in the "Mode Config" Settings.....with this configuration it is possible to connect with Ipsec, but not a routing to the local ip range.

now i have config a 172.16.0.1- 172.16.0.5 pool (first pool) in the "Mode Config" Settings.....and "ttaaattaaa" all local ip adresses are pingable and routing to all clients are also possible!


so far so good, except this i'm intersted, why the client pool 10.10.10.1-10.0.0.5 in Mode Config settings is not routable for ipsec vpn???

This IP Adresses, Range, Subnet (or anything from 10.x.x.x.x) i don't have anywhere in Use!

can someone explain that to me?

If No, it's also OK for me....VPN with Iphone WORKS now!

Hmm - it still doesn't work for me, even after I change the 'mode config' first pool to 172.16.0.1=>172.16.0.5, as you did. Same behavior - the vpn connects up just fine, but I cannot get to any devices on the network behind the netgear router. Can you verify that the *only* thing you changed was that 'mode config' subnet?

[jmizoguchi]

I believe so... there isn't much for setting in IPsec to play with

[MrWichtig]

Yes, i only change the clientrange for "mode config" otherway the "how to" from vpncasestudy.

My 3G provider is t-mobile and there are now no problems.

[JonW]

Originally Posted by MrWichtig

so far so good, except this i'm intersted, why the client pool 10.10.10.1-10.0.0.5 in Mode Config settings is not routable for ipsec vpn???

This IP Adresses, Range, Subnet (or anything from 10.x.x.x.x) i don't have anywhere in Use!

can someone explain that to me?

Congrats on getting it working.


I suppose it's possible the 10.10.x.x range was being used by the router you were connecting to and that was causing problems.

[MrWichtig]

Hi,

Which router you mean? My fvs338?
Or the 3G provider or my internet Provider (Wan Interface FVS338) ?

Locally is IP Range 10.x.x.x not in use.

[jmizoguchi]

means REMOTE end.

[MrWichtig]

My remote end (wan interface) is 91.x.x.x .

Only thing is in my dial up configuration "ISP Type" i have a 10.0.x.x ip Adress filled in under "my ip adress" and "server ip adress" but not a 10.10.x.x ip adress

[jmizoguchi]

Originally Posted by MrWichtig

My remote end (wan interface) is 91.x.x.x .

Only thing is in my dial up configuration "ISP Type" i have a 10.0.x.x ip Adress filled in under "my ip adress" and "server ip adress" but not a 10.10.x.x ip adress

some to do with 10.x subnet. I'm sure LAN side you were using were class C 255.255.255.0 subnet

[JonW]

Originally Posted by MrWichtig

Hi,

Which router you mean? My fvs338?
Or the 3G provider or my internet Provider (Wan Interface FVS338) ?

Locally is IP Range 10.x.x.x not in use.

Yeah, I was referring to the remote side that your IPhone is connecting to: the 3G or Wifi network you're accessing. I would think if 10.x.x.x was defined by the VPN, and also used by the router itself - that it would route the traffic over the VPN; but with so many different routers out there and so many different versions of firmware and configs... who knows?

[MrWichtig]

Yes, my lan subnet is class C

......and i also can live with a 172.x.x.x working client vpn pool