#SHREWSOFT TO MGUARD HOW TO#
#SHREWSOFT TO MGUARD WINDOWS 7#

The VPN Client uses a virtual IP address (e.g /32), forwarding packets directed to this IP address through the tunnel automatically to the real IP address of the client.

The VPN Client initiates the VPN connection, the mguard waits for it. The examples in this document refer to this setup. The following diagram illustrates the machines and addresses involved in the connection.

#SHREWSOFT TO MGUARD WINDOWS 7#

mguard Secure VPN Client (Build 21604) on Windows 7 and mguard 8.1 were used for this application note. Document ID: I15004_en_01 Version 1.1 of 23Ĥ 2 Introduction This document describes the required steps to configure a VPN connection between the mguard Secure VPN Client (referred to hereafter as VPN Client) and the mguard, using X.509 certificates for authentication. This documentation may not be photocopied, duplicated or translated into another language, either in part or in whole, without the previous written permission of Innominate Security Technologies AG. In addition, Innominate is neither liable for errors in this documentation nor for damage, accidental or otherwise, caused in connection with delivery, output or use of these documents.

This also applies without limitation for the implicit assurance of scalability and suitability for specific purposes. Innominate offers no warranty for these documents. All information contained in this documentation is subject to change without previous notice.

No part of this documentation may be reproduced or transmitted in any form, by any means without prior written permission of the publisher. mguard technology is protected by the German patents # and # Further national and international patent applications are pending. All other brand names or product names are trade names, service marks, trademarks, or registered trade marks of their respective owners.

#SHREWSOFT TO MGUARD HOW TO#

1 Innominate mguard Application Note How to setup an VPN connection between mguard Secure VPN Client and the mguard Innominate Security Technologies AG Rudower Chaussee Berlin, Germany Phone: +49 (0) Fax: +49 (0) Table of Contents 1 Disclaimer 3 2 Introduction 4 3 X.509 Certificates 5 4 Configuring the mguard Import of the mguard Machine Certificate Configuring the VPN Connection General Settings Authentication Firewall IKE Options 10 5 Configuring the VPN Client Certificate Import CA Certificate VPN Client Certificate Basic Configuration with the Wizard Specific Connection Settings Start/Stop the VPN Connection 17 6 Troubleshooting Error: VPN gateway not responding (waiting for Msg 2) Logbook: Could not contact Gateway (No response) in state Is the default gateway reachable? Is the Internet reachable? Is the specified IP address/dns name of the remote VPN peer correct? Does the VPN initiating packet reach the mguard? mguard log: no connection has been authorized with policy Logbook: Could not contact Gateway (No response) in state mguard Log: no suitable connection for peer mguard Log: ISAKMP Hash Payload has an unknown value after STATE_MAIN_R Error: PKI error Error: IKE (phase 2) Waiting for Msg Logbook: RECEIVED : INVALID_ID_INFORMATION after SUCCESS: IKE phase 1 ready mguard Log: cannot respond to IPsec SA request because no connection is known for Logbook: RECEIVED : NO_PROPOSAL_CHOSEN after SUCCESS: IKE phase 1 ready mguard Log: IPsec Transform refused due to strict flag Required Data when requesting Support 23 Document ID: I15004_en_01 Version 1.1 of 23ģ 1 Disclaimer Innominate Security Technologies AG June 2015 Innominate and mguard are registered trademarks of the Innominate Security Technologies AG.

Shrewsoft to mguard