search

ancwrd1 / snx-rs

Open source Linux client for Checkpoint VPN tunnels
GNU Affero General Public License v3.0
57 stars 5 forks source link

Error: Probing failed, server is not reachable via ESPinUDP tunnel! #18

Closed oahzuw closed 2 months ago

oahzuw commented 3 months ago

sudo snx-rs --mode standalone \ --ignore-server-cert true \ --no-cert-check true \ --server-name $VPN_SERVER \ --user-name $VPN_USER \ --password $VPN_PWD \ --login-type vpn_Microsoft_Authenticator \ --no-keychain true \ --tunnel-type ipsec \ --log-level debug

2024-03-30T07:51:12.771526Z DEBUG snx_rs: >>> Starting snx-rs client version 2.0.0 2024-03-30T07:51:12.771593Z DEBUG snx_rs: Running in standalone mode 2024-03-30T07:51:12.771623Z WARN snxcore::ccc: Disabling all certificate checks!!! 2024-03-30T07:51:12.781039Z DEBUG hyper_util::client::legacy::connect::dns: resolving host="VPN_SERVER" 2024-03-30T07:51:13.537363Z DEBUG hyper_util::client::legacy::connect::http: connecting to VPN_SERVER:443 2024-03-30T07:51:16.400394Z DEBUG snxcore::tunnel::ipsec::natt: Sending NAT-T probe to VPN_SERVER 2024-03-30T07:51:21.404544Z DEBUG snxcore::tunnel::ipsec::natt: Sending NAT-T probe to VPN_SERVER 2024-03-30T07:51:26.406196Z DEBUG snxcore::tunnel::ipsec::natt: Sending NAT-T probe to VPN_SERVER Error: Probing failed, server is not reachable via ESPinUDP tunnel

VPN_SERVER is my vpn address.

ancwrd1 commented 3 months ago

If you can build it yourself try changing the port number from 4500 to 500, in the natt.rs, line 22.

ancwrd1 commented 3 months ago

Currently it only supports ESPinUDP encapsulation on port 4500 for IPSec ESP traffic. Check if this port is not blocked in the firewall.

oahzuw commented 2 months ago

sorry, is me wrong, i use ikev2 protocol， it not support， so sorry!