topic Re: Trouble getting Gateway pushed to VPN-Client using Shrewsoft in General Topics https://live.paloaltonetworks.com/t5/general-topics/trouble-getting-gateway-pushed-to-vpn-client-using-shrewsoft/m-p/33797#M24803 <HTML><HEAD></HEAD><BODY><P>Found the problem and solved it.</P><P>The missing Gateway wasn't the problem.</P><P></P><P>The DH Group setting for PFS was set to 2 on both the PA and the client, however, the PA proposes not 2 but 0, so there was a PFS mismatch (visible in the system log on the PA).</P><P></P><P>Changing it to Auto on the Client solved the problem and now everything works like a charm.</P></BODY></HTML> Thu, 09 Aug 2012 14:51:11 GMT univativ 2012-08-09T14:51:11Z Trouble getting Gateway pushed to VPN-Client using Shrewsoft https://live.paloaltonetworks.com/t5/general-topics/trouble-getting-gateway-pushed-to-vpn-client-using-shrewsoft/m-p/33796#M24802 <HTML><HEAD></HEAD><BODY><P>Hello Community,</P><P></P><P>i managed to establish an IPSEC-VPN connection to our PA500 (with PanOS 4.1.5) with ShrewSofts VPN-Client (v2.1.6) using Mutual PSK &amp; X-Auth.</P><P>But its no use because there ist no Gateway pushed to the client.</P><P></P><P>Via 'route print' the connection has On-link as setting for the Gateway.</P><P></P><P>Any help in troubleshooting this issue would be appreciated.</P><P></P><P>The Laptop connection ist running Windows 7 Professional.</P><P></P><P>If you need more details on the settings in the PA500 or the client please tell me which ones to post.</P><P></P><P>If there is a complete tutorial for that matter (which i haven't found), i would be happy too.</P></BODY></HTML> Thu, 09 Aug 2012 11:42:25 GMT https://live.paloaltonetworks.com/t5/general-topics/trouble-getting-gateway-pushed-to-vpn-client-using-shrewsoft/m-p/33796#M24802 univativ 2012-08-09T11:42:25Z Re: Trouble getting Gateway pushed to VPN-Client using Shrewsoft https://live.paloaltonetworks.com/t5/general-topics/trouble-getting-gateway-pushed-to-vpn-client-using-shrewsoft/m-p/33797#M24803 <HTML><HEAD></HEAD><BODY><P>Found the problem and solved it.</P><P>The missing Gateway wasn't the problem.</P><P></P><P>The DH Group setting for PFS was set to 2 on both the PA and the client, however, the PA proposes not 2 but 0, so there was a PFS mismatch (visible in the system log on the PA).</P><P></P><P>Changing it to Auto on the Client solved the problem and now everything works like a charm.</P></BODY></HTML> Thu, 09 Aug 2012 14:51:11 GMT https://live.paloaltonetworks.com/t5/general-topics/trouble-getting-gateway-pushed-to-vpn-client-using-shrewsoft/m-p/33797#M24803 univativ 2012-08-09T14:51:11Z