Thanks for looking over my problem. I tried you suggestion below but still no luck.
My pings still show "Destination Host Unreachable".
sudo ip route show now has
10.0.0.0/24 dev eth0 scope link src 192.168.0.99
and tcpdump still shows
07:24:55.210810 IP 217.150.xxx.yyy.isakmp > 192.168.0.99.isakmp: isakmp: phase 2/others R inf[E]
07:24:55.247233 IP 192.168.0.99.isakmp > 217.150.xxx.yyy.isakmp: isakmp: phase 2/others I inf[E]
07:25:24.781823 IP 217.150.xxx.yyy.isakmp > 192.168.0.99.isakmp: isakmp: phase 2/others R inf[E]
07:25:24.843464 IP 192.168.0.99.isakmp > 217.150.xxx.yyy.isakmp: isakmp: phase 2/others I inf[E]
BTW was you example a client to LAN or LAN to LAN route? (I dont know how to tell the difference)
Zac Barton wrote:
> After running the above I dont seem to be able to ping a computer on the
> remote side of the network (which I can thru Windows and OS X). Do I
> need to setup any special tunnel interfaces (ip tunnel add ....) or
> routing rules?
You need to add special routes to ping from end-point to end-point.
/bin/ip route add $REMOTE_LAN dev $EXTERNAL_IF src $LOCAL_IP
More detail (although this is for a LAN - LAN setup) here:
Hope this helps,