raccon+openvpn route problem....

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hi Guys

After google and ask help at openvpn's forum  I'm still w/ no lucky.
Please let me know if there is another forum/email list that could help me.

That's what I have :

Italy      ----------------------Brazil HeadQuarter--------------Brazil branch
cisco ipsec                      debian+racoon+openvpn            debian+openvpn
LAN 10.0.0.0/24                  LAN 10.54.0.0/24                 LAN 10.54.1.0/24
                                 OPENVPN=10.8.0.1                 openvpn=10.8.0.2

Italy and headquarter in braszil talk w/ each other without problems
Headquarter and branch in brazil talk w/ each other without problems
branch in Brazil can't talk w/ Italy.

using traceroute from branch I get 10.8.0.1 and stop. 
I'm almost certain that it's a route problem but I dont know how to solve.
Any help could be very appreciate.

best regards

route table at headOffice brazil
xx.xx.xx.xx/28 dev eth2  proto kernel  scope link  src xx.xx.xx.xx
10.8.0.0/24 dev tun0  proto kernel  scope link  src 10.8.0.1
10.54.0.0/24 dev eth0  proto kernel  scope link  src 10.54.0.1
default via xx.xx.xx.xx  dev eth2



route table at branch
10.8.0.0/24 dev tun0  proto kernel  scope link  src 10.8.0.2
10.54.1.0/24 dev eth0  proto kernel  scope link  src 10.54.1.1
10.0.0.0/24 via 10.8.0.1 dev tun0
yy.yy.yy.yy dev eth1  proto kernel  scope link  src yy.yy.yy.yy
default via yy.yy.yy.yy dev eth1

ipsec.conf ( HeadOffice Brazil)
spdadd 10.54.0.0/16 10.0.0.0/24 any -P out ipsec
        esp/tunnel/xx.xx.xx.xx-ww.ww.ww.ww/require;

spdadd 10.0.0.0/24 10.54.0.0/16 any -P in ipsec
        esp/tunnel/ww.ww.ww.ww-xx.xx.xx.xx/require;

PS how can a see route tables inserted by racoon/ipsec?


Paulo Ricardo Bruck
consultor
http://www.contatogs.com.br
--
To unsubscribe from this list: send the line "unsubscribe netfilter" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Linux Netfilter Development]     [Linux Kernel Networking Development]     [Netem]     [Berkeley Packet Filter]     [Linux Kernel Development]     [Advanced Routing & Traffice Control]     [Bugtraq]

  Powered by Linux