New Zealand ADSL Mailing List


Re: Problem with IPSec on Linksys AG241

From: Jason Chuang <jchuang_at_xtra.co.nz>
Date: Thu, 28 Jul 2005 11:32:11 +1200
Message-Id: <20050727233211.QCQZ1650.mta3-rme.xtra.co.nz@[210.86.15.188]>

Steve,

Depending on what you budget is I would look at the "new" Juniper Networks NetScreen 5GT ADSL firewalls. (rrp about $799 I think)

These are great routers/firewalls and run the full ScreenOS code used in the bigger NetScreens.

I use one and have multiple IPSec connections terminating on the FW as well as being able to surf the web

If you have an account with Ingram Micro, you might be able to still get one on special (at a very good price)

The best thing is these boxes is that they are fully fledged firewalls with layer 4-7 packet inspection as well as HW Antivirus scanning capabilities

Cheers

Jason

>
> From: steve@spl.co.nz
> Date: 2005/07/28 Thu AM 10:21:51 GMT+12:00
> To: adsl@lists.unixathome.org
> Subject: Problem with IPSec on Linksys AG241
>
> Hiya.
>
> I'm currently playing with a linksys AG241. The reason that we bought it was for
> it's ability to terminate IPSec connections, and the good doccies for
> configuring Win2K and XP.
>
> There were problems with the default software image in that when you connected
> the VPN, you couldn't actually get to the internal network. This has been fixed
> in a beta firmware V1.00.13Beta000
> (ftp://ftp.linksys.com/international/firmware/AG241-AU_AnnexA_v1.00.13Beta_000_code.bin)
>
> The router works well, and terminates the IPSec VPN's correctly, and once
> connected you can successfully connect to internal devices.
>
> However, now when you connect the VPN, all the pinholing stops working, so no
> externally visible services are now available, even though just before the VPN
> was established, they were available!
>
> Two simple questions on this that someone may be able to help me with;
> 1) Has anyone successfully used an AG241 with incoming IPSEC and incoming
> services (e.g. http) conrrently?
> 2) Does anyone know a router model that will work with these two concurrently?
>
> Cheers -
> --
> This message is part of the NZ ADSL mailing list.
> see http://unixathome.org/adsl/ for archives, FAQ,
> and various documents.
> To unsubscribe: send mail to majordomo@lists.unixathome.org
> with "unsubscribe adsl" in the body of the message
>
>

-- 
This message is part of the NZ ADSL mailing list. 
see http://unixathome.org/adsl/ for archives, FAQ, 
and various documents. 
To unsubscribe: send mail to majordomo@lists.unixathome.org 
with "unsubscribe adsl" in the body of the message 
 
Received on Thu Jul 28 11:31:47 2005

This archive was generated by hypermail 2.2.0 : Thu Nov 30 11:48:34 2006 EST