hi, wondering if anyone has advice on setting up a ipsec vpn connection to/from a snapgear 300 to a linux based openswan server? i'm able to make an initial...
Folks, SG 3.2.2 is up on the web. It fixes a recently discovered IPSec DoS. CVE-2009-0790. We also did new versions for EOL hardware (1.7.14 & 1.8.12) as this...
Sounds a bit like a bug we found and fixed in openswan a few months back. Openswan had issues when multiple tunnels were happening and picked up the wrong bits...
... 2.0 is pretty old. openswan is up to 2.6 at the moment after spending a few years in 2.4 land (no relation to kernel.org versions). So upgrade if you can....
I have an SG570 set up and working fine with two DSL connections and half a dozen ipsec tunnels. I just purchased an SG575 on eBay. Is it possible to restore...
hi guys, Is there a simple doc that explains how to configure two internet connections into a SG560? We have an office running a pretty basic setup, SG560,...
I use the following rules (from the KB) to route http traffic to an external proxy. iptables -t nat -I PREROUTING -i eth0 -p tcp --dport 80 -s ! 192.168.254.10...
... WPA2 is just WPA with AES-CCMP instead of TKIP. You can select either TKIP or AES encryption with WPA in the SG565 web-ui. For PSK as well as Enterprise...
I wanted to tweak the local DHCP and dnsmasq settings of a SG560 beyond what the GUI provides. A Google search led me to this Yahoo group and the Snapgear KB...
Hi, anyone knows how to configure native VLANs on SG? GUI just give the option to have either access VLANs or tagged VLANs on one port but in a project I need...
Hi Paul, thanks for this interesting post... In other routers / devices DNS forwardes are in the extra DNS section and not in Network modules. Maybe this is...
Different SG devices and ports have different capabilities. Need more background about what you are trying to achieve on which type of SG device and on which...
the device is SG 565, And I would like native VLAN + tagged VLANs on some of A ports. P.S. I think that if I do not use port based VLAN or configure VLANs on...
There is a new dnsmasq (2.45) in 4.0. . Ditto for the dhcp server (isc-dhcpd-4.0.0). They may do more of what you want. Then we can talk about what might be...
Tom, Should changes be contemplated for dhcpd: We would like to see 'option tftp-server-name' and 'filename' available in the UI. We add the first on nearly...
Attempting to set up a secure FTP server with SSL. If anyone has experience it's WS_FTP Server V7. We can log on and establish a secure connection, but packets...
Have you played with passive/active mode? the reason this isn't working is that the ftp-alg is not able to deal with the crypto and thus doesn't know which...
Yes we have, but have not had much success. Looks as if SSH may be our best bet and I'm working with Ipswitch (WS_FTP) on an upgrade to the server product now...
... How come this is so prevalent for you? Are you network booting something with PXE, or getting network configuration options from the tftp server? Just...
... The switch on the 565 has some limitations about mixing tagged & untagged bits. we've tried to enable as much of what it can do in the UI while keeping it...
should work... perhaps try accept for vpn in prerouting? probably best to send a TSR to support, perhaps something unexpected is interfering. Cheers tom...
Hi, Just upgraded to 3.2.2 on a SG560. Had a look thro' the Technical Support Report and noticed it includes the password and enable password entries from...
... Hardware is the same as SG560, except: - 32M of RAM (560 only has 16) - external USB port for 3G and other serial modems (not all modems will work) -...
What has changed with the SG310? All the improvements to the SG560 are very welcome, I might consider upgrading my CyberGuard SG560 for a new SG560U. I want a...
... This one's a biggie for us because we sell VoIP hardware and in one case with a customer the voice VLAN needed to be set up on a separate LAN port, and in...
... As I understand it, CCMP /uses/ AES (block cipher) the way that TKIP uses RC4 (stream cipher). ... Which is kind of confusing-more orthogonal would be to...