[SOLVED] R066 - Connecting outbound to external IPSec VPN issues

[pitchdarkice]

It looks like with R066 you introduced ALG again.  With ALG introduced, now I can't connect externally to IPSec vpns.  I've tried both iterations enable IPSec and disable IPSec to no avail.  I also rebooted the router after each setting.  By default it comes uncheck.  Either case I can no longer connect to the VPN.  This issue was here originally when the first almond+ firmware was released, but I was able to fix it by doing the opposite of whatever the default setting was.  Now this doesn't work either, rendering the R066 pretty much useless to me from a work standpoint.

[jjoepaulines]

disable the option through commend line ... ALG option is disable by default in R66 ... May be old configuration file messing the things


Follow the steps below ..

1. Disable the ALG  in openwrt UI

2. Type

Code: [Select]

/etc/init.d/algapp disable in ALmond Plus terminal [ use ssh to access almond plus terminal ]

3.Then do reboot.

----
Factory reset will fix this problem . if you don't want to losses the old setting,Please Follow the above steps

[pitchdarkice]

disable the option through commend line ... ALG option is disable by default in R66 ... May be old configuration file messing the things


Follow the steps below ..

1. Disable the ALG  in openwrt UI

2. Type

Code: [Select]

/etc/init.d/algapp disable in ALmond Plus terminal [ use ssh to access almond plus terminal ]

3.Then do reboot.

----
Factory reset will fix this problem . if you don't want to losses the old setting,Please Follow the above steps

I tried the suggestion above with disabling ALG and it didn't work.  I then did a factory reset, still doesn't work.  Either setting, checked or uncheck.  All of this was fine with R065.

[jjoepaulines]

did you try "/etc/init.d/algapp disable" before .. if not please try this

[jjoepaulines]

Please remove the ipsec.rule that we have in "/etc/alg-rules"

Type

Code: [Select]

rm /etc/alg-rules/ipsec.rules
then

Code: [Select]

luci-reload firewall

This will work..

i verified it works.

[pitchdarkice]

Please remove the ipsec.rule that we have in "/etc/alg-rules"

Type

Code: [Select]

rm /etc/alg-rules/ipsec.rules
then

Code: [Select]

luci-reload firewall

This will work..

i verified it works.

Thanks Joe.

This process worked for me.  I am now able to connect to my IPSec vpn.  Rather than delete the ipsec.rules I just renamed it to ipsec.rules.disabled

[Franz29]

Ignore this, seem to have fixed it.

[jasmun88]

Has anyone been able to get the vpn server working on the R066 firmware? Did you have to any firewall rules or anything?

[LGNilsson]

Topics merged.

[fahrennheit451]

I still cannot use IPSec VPN from behind my Almond+.  I've followed Joe's instructions, and have even factory-reset the router, without luck.  Any other ideas?