From: mike-newsgroup@-DELETETHISPART-.upcraft.com   
      
   Mark Alexander Bertenshaw wrote:   
   > Mike Drechsler - SPAM PROTECTED EMAIL wrote:   
   >   
   >   
   >>>Martin -   
   >>>   
   >>>Just to be clear, my router is the one that is fine - it's my user's   
   >>>router which is the one that doesn't work, even though the settings   
   >>>look pretty similar.  As for the protocol rules - there are no rules   
   >>>specifically forbidding the outgoing ports.  And if so, surely I   
   >>>wouldn't have had a VPN connection in the first place?  Looking at   
   >>>the logs, it seems that the initial handshaking seems to go fine.   
   >>>It's only when I ping a host on the other side of the firewall when   
   >>>no reply is found.   
   >>>   
   >>>--   
   >>>Mark   
   >>   
   >>You have 3 options.   
   >>   
   >>1. Upgrade the firmware on the users D-Link router.  Myself I have   
   >>never known Dlink consumer routers to pass IPSec traffic unless the   
   >>gateway VPN router supports some kind of NAT traversal.  Perhaps they   
   >>have developed a newer firmware that passes standard IPSec session   
   >>traffic properly.   
   >>   
   >>2. Change the settings on your VPN gateway at work to use NAT   
   >>traversal.   
   >>   
   >>3. Replace the D-Link router with something that does support IPsec   
   >>session traffic.   
   >   
   >   
   > Mike -   
   >   
   > Tbanks for the suggestions.  I am bound to try all three of them.  But   
   > before that, I think I am going to have to some serious studying.  I admit   
   > to being a complete dilletante in this field!   
   >   
   > --   
   > Mark Bertenshaw   
   > Kingston upon Thames   
   > UK   
      
   Routers and firewalls on the client end do tend to throw a monkey wrench   
   (spanner) :) into the mix when it comes to VPN.   
      
   But you are already ahead of the game if you have things working under   
   the direct connection to the internet environment.  Most people find it   
   a struggle to get their VPN tunnels to come up under the simplest of   
   environments.   
      
   --   
   WARNING!  Email address has been altered for spam resistance.   
   Please remove the -deletethispart-. section before replying directly.   
   Mike Drechsler (mike-newsgroup@-deletethispart-.upcraft.com)   
      
   --- SoupGate-Win32 v1.05   
    * Origin: you cannot sedate... all the things you hate (1:229/2)