- Posts: 96
- Thank you received: 0
Screwed up VPN Client Connection
15 years 9 months ago #29338
by timparker
Replied by timparker on topic Re: Screwed up VPN Client Connection
Its strange I entered those lines and didn't notice anything different in the GUI at all. I did see some missing dynamic entries under the IPSec Policies section but they didn't return.
When I deleted the tunnel group and recreated it, one showed back up and I was able to reconnect. I am actually connected in right now.
Guess I need to figure out what creates those entries and understand it a little better.
When I deleted the tunnel group and recreated it, one showed back up and I was able to reconnect. I am actually connected in right now.
Guess I need to figure out what creates those entries and understand it a little better.
15 years 9 months ago #29349
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Screwed up VPN Client Connection
I do a backup before i do anything but also i try to leave off the
[code:1]wr mem[/code:1]
until its tested and working ok, that way, if anything stops working a simple reboot will fix it
[code:1]wr mem[/code:1]
until its tested and working ok, that way, if anything stops working a simple reboot will fix it
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
15 years 9 months ago #29354
by timparker
Replied by timparker on topic Re: Screwed up VPN Client Connection
Good call on that one. I had been exporting the security policies as I made a mistake back in the beginning of all of this where I was apparently impatient that the rule I wanted to delete didn't go away so I must have clicked a second time and didn't notice it quickly gobble up the next rule (that I needed for email and such to work!)
I have now started a new step in my routine to save out the output of "sh conf" to an email that I have stored away.
I have gotten through this recent mistake and am currently sitting at home working from behind an 871 that is connected back to our office. This is being written on my office PC!
This weekend I will toy with firewall rules to make sure nothing gets into the remote site that I don't want. I tried turning that on here yesterday while I was in the office and I lost connection. When I got home and logged into the router, the NAT, the VPN setup were all gone. And the firewall rules were not configured either!
So not sure what happened there. Guess I won't touch these remotely once they are in play.
I have now started a new step in my routine to save out the output of "sh conf" to an email that I have stored away.
I have gotten through this recent mistake and am currently sitting at home working from behind an 871 that is connected back to our office. This is being written on my office PC!
This weekend I will toy with firewall rules to make sure nothing gets into the remote site that I don't want. I tried turning that on here yesterday while I was in the office and I lost connection. When I got home and logged into the router, the NAT, the VPN setup were all gone. And the firewall rules were not configured either!
So not sure what happened there. Guess I won't touch these remotely once they are in play.
15 years 9 months ago #29356
by Smurf
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Replied by Smurf on topic Re: Screwed up VPN Client Connection
If playing with Access-Rules remotely be sure you dont locked youself out You will only end up doing this a few times before you are much more careful, i know from experince lol
Wayne Murphy
Firewall.cx Team Member
www.firewall.cx
Now working for a Security Company called Sec-1 Ltd in the UK, for any
Penetration Testing work visit www.sec-1.com or PM me for details.
Time to create page: 0.122 seconds