OpenVPN - alternative to an NCP (Watchguard) client- HOW?

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
Wurke
OpenVpn Newbie
Posts: 2
Joined: Mon Jun 20, 2011 1:52 pm

OpenVPN - alternative to an NCP (Watchguard) client- HOW?

Post by Wurke » Mon Jun 20, 2011 3:32 pm

Hi all, :cry:

I just wanted to set up an openVPN-client on Windows XP SP3 working as an alternative to NCP-clients (Watchguard Easy) towards an existing NCP- Server.

It's probalbly no big deal to set it up, the problem is in front of the machine, I don't have any special VPN knowledge. So I ask if somebody can assisst?

Here is a copy of the NCP profile ini-file that works. The only thing I'm sure about that it works with a shared secret. The NCP client uses a TAP-Win32-Adapter. Its the only adapter on the client.
At the end of this post there is a copy of ovpn file I had a try with, including the log output,- but it does not log into the server.

The protocol (upd) and the server-ip (IP-SEC tunnel-endpoint 123.177.66.55) and the port (17999) are correct, I've checked this with a port scanner.

I hope somebody can help me with this.

best regards, "Wurke"

------NCP secure entry client profile - it works - "dump" to an ini-file------>>>>>>>>>>>>>>>>>>>>>>>>>>

[GENERAL]
Export=1
Product=NCP Secure Entry Client
Version=9.23 Build 12
Zeit=20.06.2011 15:23:12
[PROFILE1]
Name=OpenVPNalternative
ConnMedia=8
UseForAuto=0
UseRAS=0
BootProfile=0
UserName="xxxxxxxxxxx"
Password="þþþþþþþþþþþþþþþþ"
SavePw=0
PhoneNumber=
ScriptFile=
DialerUser=""
DialerPw="þ ,þþþþþþþþþ"
DialerPhone=
HttpName=
HttpPw=
HttpSavePw=0
HttpScript=
ComPort=1
Baudrate=57600
RelComPort=1
Modem=
InitStr=
DialPrefix=
3GApnSrc=1
3GProvider=
3GUser="xxxxxxxxxx"
3GPw="xxxxxxxx"
3GPhone=
APN=AT+cgdcont=1,"IP",""
GprsATCmd=AT+CPIN=
GprsPin=
PreAuthEap=0
PreAuthHttp=0
ConnMode=1
Timeout=0
MultiLink=0
MlThreshold=0
IKE-Policy=OpenVPNalternative
IPSec-Policy=OpenVPNalternative
ExchMode=4
IkeIdType=3
IkeIdStr=OpenVPNalternative
PkiConfig=
EnableNetBIOS=1
PriVoIP=0
ConnType=1
XAUTH-Id=""
XAUTH-Pw=""
Gateway=299.122.13.266
XAUTH-Src=0
UseTunnel=0
UseXAUTH=1
DisDPD=0
UseUdpEnc=500
UseUdpEncTmp=4500
PathFinder=0
IpAddrAssign=1
IPAddress=
SubnetMask=255.255.255.0
DNS1=0.0.0.0
DNS2=0.0.0.0
WINS1=0.0.0.0
WINS2=0.0.0.0
DomainName=
SubjectCert=
IssuerCert=
FingerPrint=
UseSHA1=0
Firewall=0
OnlyTunnel=0
RasOnlyTunnel=0
UseComp=0
PFS=1
IpsecLTSec=000:08:00:00
IkeLTSec=000:08:00:00
IPSecLTKb=128000
IPSecLTType=3
DNSActiv=0
DNS1Tmp=
DNS2Tmp=
WINS1Tmp=
WINS2Tmp=
Secret="þþþþþþþþþþþþþþ"
UsePreShKey=1
[IKEPOLICY1]
IkeName=
IkeCrypt=2
IkeHash=2
IkeAuth=1
IkeDhGroup=1
[IPSECPOLICY1]
IPSecName=OpenVPNalternative
IpsecCrypt=6
IpsecAuth=2
--<<<<<< end of NCP secure entry client ini-file------<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

--->>>ovpn-file- that does not work---->>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
client
remote 123.177.66.55
port 17999
proto udp
dev tap


Mon Jun 20 17:10:48 2011 OpenVPN 2.2.0 Win32-MSVC++ [SSL] [LZO2] built on Apr 26 2011
Mon Jun 20 17:11:04 2011 WARNING: No server certificate verification method has been enabled. See http://openvpn.net/howto.html#mitm for more info.
Mon Jun 20 17:11:04 2011 NOTE: OpenVPN 2.1 requires '--script-security 2' or higher to call user-defined scripts or executables
Mon Jun 20 17:11:04 2011 UDPv4 link local (bound): [undef]:17999
Mon Jun 20 17:11:04 2011 UDPv4 link remote: 123.177.66.55:17999

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: OpenVPN - alternative to an NCP (Watchguard) client- HOW

Post by janjust » Mon Jun 20, 2011 9:31 pm

openvpn is NOT a replacement for an IPSec client - openvpn uses its own protocol. If you want to use OpenVPN you must run it on both client and server.

User avatar
maikcat
Forum Team
Posts: 4200
Joined: Wed Jan 12, 2011 9:23 am
Location: Athens,Greece
Contact:

Re: OpenVPN - alternative to an NCP (Watchguard) client- HOW

Post by maikcat » Tue Jun 21, 2011 6:59 am

hi there,

watchguard is a *very* good firewall appliance
but it is not provides openvpn functionality.

it does provide IPSec and SSL vpn (you can connect via web on it ,then browse through your lan).

as JJK said you have to setup the service on a linux/win host...

cheers,

Michael.
Amiga 500 , Zx +2 owner
Long live Dino Dini (Kick off 2 Creator)

Inflammable means flammable? (Dr Nick Riviera,Simsons Season13)

"objects in mirror are losing"

Wurke
OpenVpn Newbie
Posts: 2
Joined: Mon Jun 20, 2011 1:52 pm

Re: OpenVPN - alternative to an NCP (Watchguard) client- HOW

Post by Wurke » Tue Jun 21, 2011 12:27 pm

janjust wrote:openvpn is NOT a replacement for an IPSec client - openvpn uses its own protocol. If you want to use OpenVPN you must run it on both client and server.
thanks, now I know what I have to do.

Post Reply