Re: Win2k and CIPE

Jake Bullet <[email protected]>
Newsgroups gmane.comp.encryption.cipe
Message-ID <[email protected]>

On Tue, 2 Sep 2003, Phil Scarratt wrote:

> Jake Bullet wrote:
> >>
> >>With the following assumptions:
> >>- CIPE tunnel between Alice and Bob with CIPE IP addresses 172.16.0.1/2
> >>- Bob and Chris are on the same LAN with LAN IP addresses 172.16.1.1/2
> >>- Bob is Chris' default gateway
> >>Adding a route to Alice for the Bob-Chris LAN (route add 172.16.1.0 mask 
> >>255.255.255.0 172.16.0.1) should allow packets to get from Alice to 
> >>Chris and back.
> >>
> >>If however, the following scenario presents itself:
> >>- CIPE tunnel between Alice and Bob with IP addresses as marked above
> >>- CIPE tunnel between Bob and Chris with IP addresses as marked above
> >>then the following should work (never done this so totally untested):
> >>- add route to Alice that points to 172.16.1.0 (route add 172.16.1.0 
> >>mask 255.255.255.0 172.16.0.1)
> >>- add route to Chris that points to 172.16.0.0 (route add 172.16.0.0 
> >>mask 255.255.255.0 172.16.1.1)
> >>
> > 
> > 
> > That's not quiet it, as Chris is also running CIPE to Bob.  I did try this
> > but the Server (Bob) didn't seem to be routing the packets.
> > I did turn on IP forwarding.  Running TCP dump on both CIPE interfaces
> > showed Alice sending the ECHO REQUEST to Bob, and that's where it stopped.
> > 
> > As mentioned lots of these were showing up in the syslog:
> > 
> > May  6 01:21:37 bob kernel: cipcb2: got bogus length=9
> > May  6 01:21:37 bob kernel: cipcb1: got bogus length=9
> > 
> > Stephen
> > 
> 
> Is there a firewall running on Bob? What's the routing table for Bob 
> look like?
> 

There is no firewall running on Bob for the CIPE interfaces, and the
routing table is empty.

Stephen


--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.