• February 24, 2025, 07:25:43 AM
  • Welcome, Guest
Please login or register.

Login with username, password and session length
Advanced search  

News:

This Forum Beta is ONLY for registered owners of D-Link products in the USA for which we have created boards at this time.

Author Topic: DFL 800 invalid_ip_checksum IPSEC  (Read 4125 times)

yoteur

  • Level 1 Member
  • *
  • Posts: 10
DFL 800 invalid_ip_checksum IPSEC
« on: September 02, 2010, 08:48:09 AM »
Hi all!

I have a PSK IPSEC tunnel with a partner, the tunnel is up, my rules seems to be good but when my partner tries to contact my server behind the dlink he has no answer and I see his packet drop in logging:
Warning IP_ERROR 01500005 LogChecksumErrors TCP my_tunnel_ipsec srce_ip/dest_ip 4 invalid_ip_checksum drop

Do you know where does that come?

Thanks
Alexaa
Logged

Fatman

  • Level 9 Member
  • ****
  • Posts: 1675
Re: DFL 800 invalid_ip_checksum IPSEC
« Reply #1 on: September 02, 2010, 09:34:53 AM »
Tunnel or Transport?

NAT in front of your VPN devices?
Logged
non progredi est regredi

yoteur

  • Level 1 Member
  • *
  • Posts: 10
Re: DFL 800 invalid_ip_checksum IPSEC
« Reply #2 on: September 06, 2010, 02:08:51 AM »
My tunnel works like that:
there is only traffic from my partner to my servers. I use SAT Action to dest nat from virtual IP on thje dlink to the real ip on thje server.

Then I have a rule used from my network to partner network where I use NAT action. I source nat my private IP.


Thanks,
Alexaa
Logged