From: Paulo Ricardo Bruck <pauloric@contatogs.com.br>
To: netfilter@vger.kernel.org
Subject: raccon+openvpn route problem....
Date: Thu, 25 Nov 2010 18:05:18 -0200 (BRST) [thread overview]
Message-ID: <5587032.20.1290715518120.JavaMail.root@mercurio> (raw)
In-Reply-To: <4CEE5EA9.3020309@trash.net>
Hi Guys
After google and ask help at openvpn's forum I'm still w/ no lucky.
Please let me know if there is another forum/email list that could help me.
That's what I have :
Italy ----------------------Brazil HeadQuarter--------------Brazil branch
cisco ipsec debian+racoon+openvpn debian+openvpn
LAN 10.0.0.0/24 LAN 10.54.0.0/24 LAN 10.54.1.0/24
OPENVPN=10.8.0.1 openvpn=10.8.0.2
Italy and headquarter in braszil talk w/ each other without problems
Headquarter and branch in brazil talk w/ each other without problems
branch in Brazil can't talk w/ Italy.
using traceroute from branch I get 10.8.0.1 and stop.
I'm almost certain that it's a route problem but I dont know how to solve.
Any help could be very appreciate.
best regards
route table at headOffice brazil
xx.xx.xx.xx/28 dev eth2 proto kernel scope link src xx.xx.xx.xx
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.1
10.54.0.0/24 dev eth0 proto kernel scope link src 10.54.0.1
default via xx.xx.xx.xx dev eth2
route table at branch
10.8.0.0/24 dev tun0 proto kernel scope link src 10.8.0.2
10.54.1.0/24 dev eth0 proto kernel scope link src 10.54.1.1
10.0.0.0/24 via 10.8.0.1 dev tun0
yy.yy.yy.yy dev eth1 proto kernel scope link src yy.yy.yy.yy
default via yy.yy.yy.yy dev eth1
ipsec.conf ( HeadOffice Brazil)
spdadd 10.54.0.0/16 10.0.0.0/24 any -P out ipsec
esp/tunnel/xx.xx.xx.xx-ww.ww.ww.ww/require;
spdadd 10.0.0.0/24 10.54.0.0/16 any -P in ipsec
esp/tunnel/ww.ww.ww.ww-xx.xx.xx.xx/require;
PS how can a see route tables inserted by racoon/ipsec?
Paulo Ricardo Bruck
consultor
http://www.contatogs.com.br
next prev parent reply other threads:[~2010-11-25 20:05 UTC|newest]
Thread overview: 15+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-11-25 1:46 [PATCH 0/8] ipvs: ipvs update for nf-next-2.6 Simon Horman
2010-11-25 1:46 ` [PATCH 1/8] IPVS: Backup, Prepare for transferring firewall marks (fwmark) to the backup daemon Simon Horman
2010-11-25 1:46 ` [PATCH 2/8] IPVS: Split ports[2] into src_port and dst_port Simon Horman
2010-11-25 1:46 ` [PATCH 3/8] IPVS: skb defrag in L7 helpers Simon Horman
2010-11-25 1:46 ` [PATCH 4/8] IPVS: Handle Scheduling errors Simon Horman
2010-11-25 1:46 ` [PATCH 5/8] IPVS: Backup, Adding structs for new sync format Simon Horman
2010-11-25 1:46 ` [PATCH 6/8] IPVS: Backup, Adding Version 1 receive capability Simon Horman
2010-11-25 1:46 ` [PATCH 7/8] IPVS: Backup, Change sending to Version 1 format Simon Horman
2010-11-25 1:46 ` [PATCH 8/8] IPVS: Backup, adding version 0 sending capabilities Simon Horman
2010-11-25 13:03 ` [PATCH 0/8] ipvs: ipvs update for nf-next-2.6 Patrick McHardy
2010-11-25 20:05 ` Paulo Ricardo Bruck [this message]
2010-11-25 21:06 ` raccon+openvpn route problem Gáspár Lajos
2010-11-26 12:12 ` Paulo Ricardo Bruck
2010-11-25 21:57 ` fuzzy_4711
2010-11-26 11:42 ` Paulo Ricardo Bruck
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5587032.20.1290715518120.JavaMail.root@mercurio \
--to=pauloric@contatogs.com.br \
--cc=netfilter@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.