Re: [Ipsec-tools-users] RoadWarrior configuration problem

[Zac B. <zac...@gm...>]

Hi George

Thanks for looking over my problem. I tried you suggestion below but still
no luck.

My pings still show "Destination Host Unreachable".

sudo ip route show now has
10.0.0.0/24 dev eth0 scope link src 192.168.0.99

and tcpdump still shows
07:24:55.210810 IP 217.150.xxx.yyy.isakmp > 192.168.0.99.isakmp: isakmp:
phase 2/others R inf[E]
07:24:55.247233 IP 192.168.0.99.isakmp > 217.150.xxx.yyy.isakmp: isakmp:
phase 2/others I inf[E]
07:25:24.781823 IP 217.150.xxx.yyy.isakmp > 192.168.0.99.isakmp: isakmp:
phase 2/others R inf[E]
07:25:24.843464 IP 192.168.0.99.isakmp > 217.150.xxx.yyy.isakmp: isakmp:
phase 2/others I inf[E]


Anymore suggestions/examples?

Ta

Zac


BTW was you example a client to LAN or LAN to LAN route? (I dont know how to
tell the difference)


On 5/22/06, George Borisov <ge...@dx...> wrote:
>
> Zac Barton wrote:
> >
> > After running the above I dont seem to be able to ping a computer on the
> > remote side of the network (which I can thru Windows and OS X). Do I
> > need to setup any special tunnel interfaces (ip tunnel add ....) or
> > routing rules?
>
> You need to add special routes to ping from end-point to end-point.
>
> Quick example:
>
> LOCAL_IP='192.168.1.1'
> REMOTE_LAN='10.0.0.0/24'
> EXTERNAL_IF='eth0'
>
> /bin/ip route add $REMOTE_LAN dev $EXTERNAL_IF src $LOCAL_IP
>
> More detail (although this is for a LAN - LAN setup) here:
> http://www.littleyojik.co.uk/computers/debian_vpn.html
>
>
> Hope this helps,
>
> --
> George Borisov
>
> DXSolutions Ltd
>
>
>
>