Lancom 1681V behind Fritzbox (how to setup vpn connection)

[ramonniee]

Hi,

We have the following situtation:

Internet - Fritzbox - lancom - LAN.

Fritzbox has: 192.168.178.1
Lancom has: 192.168.178.254

On the fritzbox we used Exposed host to route all traffic to the lancom. On the lancom is the vpn wizard used to setup the vpn configuration. With Shrew vpn vpn client i'm trying to setup a vpn connection. But this always times out with "invalid message from gateway". If i connect the Lancom immediately to the internet the vpn connection is working without a problem.

What must i do to make a vpn client connection to my lancom when it resided behind the fritzbox. (I know for sure the fritzbox routes all traffic to the lancom).

Thx.

Ramon

[LoUiS]

Hi,

(I know for sure the fritzbox routes all traffic to the lancom).

Obviously it doesn't and you already proved it yourself.
Without the Fritzbox it works fine, with the Fritzbox it doesn't.
Maybe the Fritzbox does not pass all the needed VPN protocols to the LANCOM. On the LANCOM CLI, you have the possibilities to do VPN traces (tr # vpn-st), maybe this might help you to find the reason why it is not working properly.


Ciao
LoUiS

[ramonniee]

Hi,

thx for your answer. I think i am a bit further now. In the vpn trace i receive the following:

phase1 id mismatch
received: ipv4-host 192.168.178.254
expected: ipv4-host 83.160.x.x

So i setup a vpn to 83.160.x.x but my lancom has 192.168.178.254. (internal). The external ip is from the fritzbox.

Unfortunately i don't know what to do about this.

Ramon

[ramonniee]

Solved:

I already figured it out. I had to give up a local and remote identity in the VPN wizard on the lancom.
First my Local Identity was "no idenitity". Thats the cause of my ip address problem.
After settings this to domain name and adjusting the vpn client the problem is solved.