Re: [IPCop-user] A Very import road warrior VPN Question that everyone should read.

[Rainer Z. <Use...@zo...>]

am...@pu...(Aaron Mower)  30.07.04 15:10


>I see all these topics about help with VPN setting up a road warrior
>(and I am one of them).  So my question is, Why isn't their any
>documentation for V.1.3 of IPCop?  Why are we still using V1.2 for the
>VPN documentation?

Isn't that a wiki where everybody can contribute?
But true: it's very irretating to see 
versions numbers like v0.2 if that is the (working) relevant doc! 

>The reason why I ask this is because it seems that
>there are quite a few people 

few? a lot! ;-)

>that need help setting up a VPN road warrior and there isn't' 
>really a "good" place to go look for it.
>I have used 
>http://www.ipcop.org/1.2.0/en/vpn/html/win2k-winxp-connection.html and 
>http://www.ipcop.org/1.3.0/en/admin/html/vpnaw.html 
>to try and get my VPN up and running and all I get back when I try and ping
>the box no matter how many times is just "Negotiation IP Security"



>Pinging 192.168.0.1 with 32 bytes of data:

Please always give the actual commandline you used.
(commented with a # to avoid unwanted sides effects if accidentially
pastes into a shell. Murphy: sh*t happens... )

a) there are still folks not perfect with unix and want to learn more.
b) sometimes other readers see more than you.

So you can avoid questions like

Did you use
#ping 192.168.0.1 

or
#ping -I eth0  192.168.0.1

or?


>Negotiating IP Security.
>Negotiating IP Security.
>Negotiating IP Security.
>Negotiating IP Security.

>Ping statistics for 192.168.0.1:
>    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),


>So I guess something isn't working just right 

A not working "ping" never(!) gives any relevant answers.
(OK, maybe you can say: my CPU is a live)


>here because from what I
>have read it said that the First line should look something like this
>WHEN it works:

You must ping tell which interface to use!
(ping -I 
       -I interface address
              Set  source address to specified interface address.
              Argument may be  numeric  IP  address  or  name  of
              device.  When  pinging IPv6 link-local address this
              option is required.
)


Rainer