Comments on: Basic Troubleshooting for IPsec based VPN’s http://blogs.isaserver.org/pouseele/2007/07/07/basic-troubleshooting-for-ipsec-based-vpns/ Stefaan Pouseele, an ISA Server MVP, discusses issues brought up within various ISA articles and Microsoft publications. Updates to the ISA Firewall, protocol support, discussions on the different ISA clients, ISA features, how to clean up network traffic and links to new ISA server literature are all be included within the blog. Get help on troubleshooting the ISA network firewall and learn how to create good security policies. Coverage on ISA Server 2006 also appears. Fri, 5 Sep 2008 22:31:26 +0000 http://wordpress.org/?v=MU by: Stefaan Pouseele Blog » Blog Archive » Multiple L2TP/IPsec VPN clients behind a NAT device http://blogs.isaserver.org/pouseele/2007/07/07/basic-troubleshooting-for-ipsec-based-vpns/#comment-14474 Sat, 24 Nov 2007 16:56:44 +0000 http://blogs.isaserver.org/pouseele/2007/07/07/basic-troubleshooting-for-ipsec-based-vpns/#comment-14474 [...] Before diving into the details, it’s necessary to have a good understanding of how the IPsec protocol works and especially how the IPsec NAT Traversal is done. Also, a good understanding of how to troubleshoot such a scenario is very handy. To refresh your knowledge on how the IKE Negotiation happens, check out my blog Basic Troubleshooting for IPsec based VPN’s and related links. In short: [...] […] Before diving into the details, it’s necessary to have a good understanding of how the IPsec protocol works and especially how the IPsec NAT Traversal is done. Also, a good understanding of how to troubleshoot such a scenario is very handy. To refresh your knowledge on how the IKE Negotiation happens, check out my blog Basic Troubleshooting for IPsec based VPN’s and related links. In short: […]

]]> by: Jacco de Leeuw http://blogs.isaserver.org/pouseele/2007/07/07/basic-troubleshooting-for-ipsec-based-vpns/#comment-13135 Tue, 06 Nov 2007 22:16:46 +0000 http://blogs.isaserver.org/pouseele/2007/07/07/basic-troubleshooting-for-ipsec-based-vpns/#comment-13135 A small correction to the procedure for obtaining an Oakley log on Vista: You forgot to mention that you have to stop the IKEEXT service after you reproduced the problem (step 4). Otherwise Ikeext.etl will not be flushed and remain at 0 bytes. I actually spent one support voucher to obtain this procedure from Microsoft Support. I extended and clarified it a bit before posting it on my webpage. Jacco A small correction to the procedure for obtaining an Oakley log on Vista:

You forgot to mention that you have to stop the IKEEXT service after you reproduced the problem (step 4). Otherwise Ikeext.etl will not be flushed and remain at 0 bytes.

I actually spent one support voucher to obtain this procedure from Microsoft Support. I extended and clarified it a bit before posting it on my webpage.

Jacco

]]>