Re: CIPE RH linux + Windows 2000 routing problem
Phil Scarratt <[email protected]>
| Newsgroups | gmane.comp.encryption.cipe |
|---|---|
| Organization | Draxsen Technologies |
| Message-ID | <[email protected]> |
Zkoumalek wrote: > Hello, > > I am making CIPE VPN tunel and I want add one Win 2000 computer with public IP address into our company's LAN. We have RH linux 7.1 as router where we are runing CIPE 1.4.5. On another machine is Windows 2000 SP 4 installed and there is CIPE-Win32 version 2.0-pre15. My tunnel works fine, I think - I can ping left and right end of tunnel from Linux (ping 192.168.3.1)and Windows (ping 192.168.1.2)too. But I can´t ping on another machine inside my network (ie. 192.168.1.15) or inner interface in my linux router (ping 192.168.1.1). I tested packets with tcpdump and ping and packets from RH linux router goes into tunel fine, but ICMP requests from Win 2000 aren't coming back. > > Can anybody help me? > > Thank you very much. > T. Zkoumalek > > My setup is: > router (ifcfg-cipcb0): > DEVICE=cipcb0 > ONBOOT=no > USERCTL=yes > MYPORT=5000 > PEER=win2000.public.ip:5000 > ME=rh-linux.public.ip:5000 > PTPADDR=192.168.3.1 > IPADDR=192.168.1.2 > PING=5 > route add -net 192.168.3.0 netmask 255.255.255.0 dev cipcb0 > > routeru's interfaces: > eth0:rh-linux.public.ip > eth1:192.168.1.1 > cipcb0: Link encap:IPIP Tunnel HWaddr > inet addr:192.168.1.2 P-t-P:192.168.3.1 Mask:255.255.255.255 > UP POINTOPOINT NOTRAILERS RUNNING NOARP MTU:1442 Metric:1 > > Win2000 (CIPE Win32): > Local IP address: win2000.public.ip:5000 > Peer IP address: rh-linux.public.ip:5000 > Local PTP address: 192.168.3.1 > Peer PTP address: 192.168.1.2 > route add 192.168.1.0 mask 255.255.255.0 192.168.3.1 metric 1 if 2 > > Win 2000's interfaces: > 1. win2000.public.ip > 2. 192.168.3.1 (CIPE Win32 interface) > Does the route add command on the win2k machine work? Double check it with "route print". I think windows does not like adding a route whose gateway and interface are not on the same subnet. Fil -- Phil Scarratt Draxsen Technologies IT Contractor 0403 53 12 71 -- Message sent by the [email protected] mailing list. Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body Other commands available with "help" in body to the same address. CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>