Re: ipsec communications with windows server

["shadow floating" <nadengine () googlemail com>]

hi guys

i managed to get it up between the windows server and the cisco router
with alittle problem, first the configuration of the devices:
config of router:
ip:10.0.0.1
IKE:HMAC-SHA1,DH2,preshared
IPSec:transparent ESP-3DES-SHA1
DPD: 10 sec
acl of interesting traffic:
        access-list 100 permit ip 10.0.0.1 10.0.0.2
        accessl-list 100 permit ip 10.0.0.2 10.0.0.2
other functions of router: NAT, stateful Inspection firewall

config of windows
ip:10.0.0.2
IKE:HMAC-SHA1,DH2,preshared
IPSec:transparent ESP-3DES-SHA1
acl: any ip from 10.0.0.2 to 10.0.0.1 (mirrored)
services on windows: syslog server installed

10.0.0.1 is also the gateway for the management machine so all traffic
from the windows machine to the internet must pass first through that
router

it all worked fine except for one thing...after variable amount of
time the router seems not to be sending logs to the syslog server on
the windows machine until it first recieves packets from from the
windowshost...these packets could be a a dns request routed by router
to external dns....
in other words i keep recieving logs from the router to the syslog
server for say 8 hours...then i recieve nothing....if i started
windows update for example on the windows machine , the routers start
again sending syslog messages as "inspection rule allowed outbound dns
from 10.0.0.2"..and keep recieving syslog messages for a about 10
hours..and then stop recieving any syslog messages...and same thing
happens again and again...the time is not fixed but never got more
than 1 day of  continous syslog messages recieving

does anyone have any suggestions?
thanks alot
regards,

Nad

On Feb 10, 2008 7:25 PM, Brett Cunningham <cssniper22 () gmail com> wrote:
> What's the config on the router? Do you have xauth and config-mode disabled?
>
>
> On 2/10/08, shadow floating <nadengine () googlemail com> wrote:
> > Hi list,
> > i've been trying to get an IPSec communication channel to work between
> > a cisco 2811 router  IOS 12.4 and a windows server that have ipsec
> > capabilities, have anyone tried this before and worked?
> > i want to have a secure communication between the windows management
> > host and the router via ipsec vpn
> > the ike phase one seems to be ok as but the quick mode always fails
> > though the same parameters are configured on both sides for a
> > trasparent mode vpn
> > any hints?
> >
> > thanks alot
> > regards
> >
> > Nad
>
> > _______________________________________________
> > firewall-wizards mailing list
> > firewall-wizards () listserv icsalabs com
> > https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
> _______________________________________________
> firewall-wizards mailing list
> firewall-wizards () listserv icsalabs com
> https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards