topic XSR VPN EZIPSEC in ExtremeSwitching (EOS)

XSR VPN EZIPSEC

Dietmar_Bunk — Wed, 03 Jun 2015 16:13:00 GMT

Hi,

is there an manual/config guide availabe for an EZ-IPsec-configuration between two XSR-1805 (one with static/public IP-address and one with an private IP-address behind an ISP-router with dynymic address)?

RE: XSR VPN EZIPSEC

Doug — Wed, 03 Jun 2015 16:47:00 GMT

Take a look at the following GTAC Knowledge article, would this help?

https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Configure-XSR-IPsec-Over-GRE-VPN-Between-Central-Site-and-Two-Remote-Sites

RE: XSR VPN EZIPSEC

Dietmar_Bunk — Wed, 03 Jun 2015 19:26:00 GMT

Hi,

sorry - this does´nt help because your article is for "Static IP addresses on all WAN ports".

we need an manual/config guide availabe for an EZ-IPsec-configuration between two XSR-1805 (one with static/public IP-address and one with an private IP-address behind an ISP-router with dynymic address)?

RE: XSR VPN EZIPSEC

Doug — Wed, 03 Jun 2015 19:29:00 GMT

No problem, I will have one of our XSR Techs take a look at your request....

-Doug

RE: XSR VPN EZIPSEC

Jerome__Raymond — Wed, 03 Jun 2015 23:33:00 GMT

Please see…
https://gtacknowledge.extremenetworks.com/articles/How_To/How-to-Configure-VPN-Between-Two-XSRs-With-One-Static-and-One-Dynamic-IP-Address

RE: XSR VPN EZIPSEC

Dietmar_Bunk — Thu, 04 Jun 2015 12:18:00 GMT

Hi,

have tried these configurations - but the Central site router logs:

IKE: IKE 'Mode Config' (dynamic address assignment) is disabled.
TMS: Unable to find local interface for IP 0.0.0.0!

whats the problem?

RE: XSR VPN EZIPSEC

Jerome__Raymond — Fri, 05 Jun 2015 02:04:00 GMT

Troubleshooting XSR VPN configurations are best pursued through the GTAC Service Case process. I have sent you an email from the service case, please reply to that with the configurations of the routers involved. Best Regards, Raymond