Desktop

Ask something
Discussion Locked

Netscreen to Cisco connection

0 helpful
1 reply

by jfuentes

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
I have setup a Netscreen 5XP to connect to a cisco router for tranaction software my company is using. Some of my user when sending a request with more than 2 tranactions get A run time winsock error. I notice that the users that are working fine are using Safenet VPN soft ware they can tranact 100's of request I firts thought it was MTU needed to be change but that did not help. when I install the safe net to non working machine they work fine Does any one have any solution I am stuck

1 reply

by compgirlfhredi

These are only from MY experience:
I just configured an NS100 to NS5 VPN with both units in transparent
mode and I had to configure routes on both netscreens in order for
this to work.

The commands were:

set route 172.16.1.0 255.255.255.0
(Where 172.16.1.0 was the internal network)
set route 0.0.0.0 0.0.0.0 gateway 172.16.1.254
(Where .254 was the external router).

Obviously I did the same thing for the remote netscreen (with it's
local network info).

I know what you're doing is slightly different but try adding a route
to the NS_Remote box.

In the rules/policy section: try defining your internal address block (i.e
"trusted LAN") in the address book and using that as opposed to "inside
any"

sorry, i'm not familiar with the term 'transparent mode' as it applies to
the Netscreen product, but if it means 'only configured at layer 2, ie a
filtering bridge' then i know i understand you.

you can't do IPSec VPNs with a layer 2 device, it requires layer 3 (IP)
manipulations (encapsulation, packet header mangling, etc ...), along with
endpoint addressing (for the gateways or participating nodes), none of
which are available (on the WAN) only at layer 2.

This discussion is closed to new replies.