Can we set up IPSEC with SnapGear/SnapGearSME530 firewall ?

There are many root causes can make the VPN connection not stable. You should try to rule out the possibility that the outdated firmware cause the issue first. Contact zyxel tech support after you update the firmware.

look in the settings of the Belkin to see if you can enable VPN Pass-through.

Try disabling some of the firewall functions on the belkin to isolate the issue and turn the rest back on.

If for some reason this model doesn't work even after the above, try changing the VPN client's connection settings,there are only two to choose from... (click modify on your connection entry, go to the Transport tab > then choose from:
IPSec over TCP and IPSec over UDP (port 10000)

show ipsec stats
this command was introduced in code 7.0
it will show the active tunnels, the previous tunnels and several other stats of inbound and outbound packets.....
for example:- IPsec Global Statistics ----------------------- Active tunnels: 2 Previous tunnels: 9 Inbound Bytes: 4933013 Decompressed bytes: 4933013 Packets: 80348 Dropped packets: 0 Replay failures: 0 Authentications: 80348 Authentication failures: 0 Decryptions: 80348 Decryption failures: 0 Decapsulated fragments needing reassembly: 0 Outbound Bytes: 4441740 Uncompressed bytes: 4441740 Packets: 74029 Dropped packets: 0 Authentications: 74029 Authentication failures: 0 Encryptions: 74029 Encryption failures: 0 Fragmentation successes: 3 Pre-fragmentation successes:2 Post-fragmentation successes: 1 Fragmentation failures: 2 Pre-fragmentation failures:1 Post-fragmentation failures: 1 Fragments created: 10 PMTUs sent: 1 PMTUs recvd: 2 Protocol failures: 0 Missing SA failures: 0 System capacity failures: 0

Use the ping command to check the network or find whether the application server is reachable from your network. It can be a problem with the maximum segment size (MSS) for transient packets that traverse a router or PIX/ASA device, specifically TCP segments with the SYN bit set.

Cisco VPN
Upgrade your router to the latest firmware. You can download firmware at http://www.dlink.com.au/tech/ .
Disable all Firewall Software (ZoneAlarm, Windows XP Firewall, etc.).
Configuring PC running VPN Client Software:
Step 1 Disable all Firewall Software (ZoneAlarm, Windows XP Firewall, etc.).
Step 2 Change IP Address to be outside of the routers DHCP Pool (i.e. 192.168.0.99). By default the DHCP pool is 192.168.0.100 - 192.168.0.199.
Step 3 Configure Cisco VPN Client - Connection Properties.
Step 4 Check Enable Transparent Tunneling.
Step 5 Allow IPSec over UDP ( NAT/PAT).
Configuring Router using the Web-based configuration:
Step 1 Open the Web Configuration Page by entering 192.168.0.1 into your web browser. Enter username (admin) and your password (blank by default).
Step 2 Check the Status tab and make sure that you are running the latest version of firmware. If not, upgrade firmware before proceeding.
Step 3 Click on the Miscellaneous button on the Tools tab. Enable both PPTP and IPSec.
Step 4 Click Apply.
Step 5 Click on the Virtual Servers button on the Advanced tab.
Step 6 Enable IPSec from the list and configure as follows:
Private IP: IP Address of the PC running Cisco VPN Client
Protocol: UDP
Private Port: 500
Public Port: 500
Schedule: Always.
Step 7 Click Apply and then Continue.
Step 8 Enable PPTP from the list and configure as follows:
Private IP: IP Address of the PC running Cisco VPN Client
Protocol: TCP
Private Port: 1723
Public Port: 1723
Schedule: Always.
Step 9 Click Apply and then Continue.


http://www.dlink.com.au/tech/default.asp?model=DI-524UP

These rules look exactly the same to me. Service provider is saying provide an ACL - which is an Access Control List - which simply permits the traffic from the 172 class B to the two 192 class Cs.

As far as the second one, Service Provider is saying that anything GOING to 172 class B needs to be NATed on your inside.

Hi, Since this box just uses Checkpoint, There wont be much of complication in that. In box level you can take the help of CLI Help. For your ref. im giving the link of Manual.

http://www.allyourprices.com/product-specifications/10126220/Celestix-One-FV940-Security-Appliance.html

The flashing lights meen there is a configureation problem with your snapgear. Check your settings to make sure thay are current for your new location. Just because you own an IP/DNS from one service does not mean that it will be valid from another service. Some services use a system where you set your router to DHCP and they assign you your static IP/DNS. Also Snapgear routers have configurable ports so they are going to be picky about what is plugged into what port. Hope this helps

have you taken any backup of your router configuration

The 3Com OfficeConnect Cable/DSL Secure Gateway includes all the security features provided by the 3Com OfficeConnect Cable/DSL Gateway, plus a full-function stateful packet inspection firewall for additional security. The 3Com OfficeConnect Cable/DSL Secure Gateway also provides VPN initiation/termination that supports the PPTP, IPSec, L2TP/IPSec, and VPN protocols.