FVX538 et Shrew, pb ipsec Options

[benneb]

bonjour,

j'aimerais connecter un client VPN Shrew sur un windows 7 en 3G Orange avec mon FVX538
mon utilisateur se connecte : Login succeeded for user "xxxxxx"_
mais aucune information ne transite
192.168.1.225 , c'est mon port wan 1
mais ensuite voilà l'erreur



- Last output repeated twice -
2012 Jul 17 15:51:14 [FVX538] [IKE] Remote configuration for identifier "fvx_remote.com" found_
2012 Jul 17 15:51:14 [FVX538] [IKE] Received request for new phase 1 negotiation: 192.168.1.225[500]<=>90.94.164.36[500]_
2012 Jul 17 15:51:14 [FVX538] [IKE] Beginning Aggressive mode._
2012 Jul 17 15:51:14 [FVX538] [IKE] Received Vendor ID: draft-ietf-ipsra-isakmp-xauth-06.txt_
2012 Jul 17 15:51:14 [FVX538] [IKE] Received unknown Vendor ID_
- Last output repeated twice -
2012 Jul 17 15:51:14 [FVX538] [IKE] Received Vendor ID: draft-ietf-ipsec-nat-t-ike-02__
2012 Jul 17 15:51:14 [FVX538] [IKE] Received unknown Vendor ID_
- Last output repeated 5 times -
2012 Jul 17 15:51:14 [FVX538] [IKE] Received Vendor ID: CISCO-UNITY_
2012 Jul 17 15:51:14 [FVX538] [IKE] Received unknown Vendor ID_
2012 Jul 17 15:51:14 [FVX538] [IKE] For 90.94.164.36[500], Selected NAT-T version: draft-ietf-ipsec-nat-t-ike-02_
2012 Jul 17 15:51:15 [FVX538] [IKE] Setting DPD Vendor ID_
- Last output repeated twice -
2012 Jul 17 15:51:15 [FVX538] [IKE] Floating ports for NAT-T with peer 90.94.164.36[4500]_
2012 Jul 17 15:51:15 [FVX538] [IKE] NAT-D payload does not match for 192.168.1.225[4500]_
2012 Jul 17 15:51:15 [FVX538] [IKE] NAT-D payload does not match for 90.94.164.36[4500]_
2012 Jul 17 15:51:15 [FVX538] [IKE] NAT detected: Local is behind a NAT device. and alsoPeer is behind a NAT device_
2012 Jul 17 15:51:15 [FVX538] [IKE] Sending Xauth request to 90.94.164.36[4500]_
2012 Jul 17 15:51:15 [FVX538] [IKE] ISAKMP-SA established for 192.168.1.225[4500]-90.94.164.36[4500] with spi:2565ce736cfc4a99:6656417bfdfa9808_
2012 Jul 17 15:51:15 [FVX538] [IKE] Received attribute type "ISAKMP_CFG_REPLY" from 90.94.164.36[4500]_
2012 Jul 17 15:51:15 [FVX538] [IKE] Login succeeded for user "xxxxxxxxxx"_
2012 Jul 17 15:51:16 [FVX538] [IKE] 192.168.2.10 IP address is assigned to remote peer 90.94.164.36[4500]_
2012 Jul 17 15:51:16 [FVX538] [IKE] Responding to new phase 2 negotiation: 192.168.1.225[0]<=>90.94.164.36[0]_
2012 Jul 17 15:51:16 [FVX538] [IKE] Failed to get IPsec SA configuration for: 192.168.3.0/24<->90.94.164.36/32 from fvx_remote.com_

voici toute ma config

http://img210.imagevenue.com/img.php?image..._1_122_49lo.jpg
http://img235.imagevenue.com/img.php?image...2_122_419lo.jpg
http://img293.imagevenue.com/img.php?image...4_122_391lo.jpg

merci de votre aide, je pense être vraiment pas loin d'y arriver

Ce message a été modifié par benneb - mardi 17 juillet 2012 à 15:47.

[benneb]

quelqu'un a une idée ??