Hi there,
sometimes the routes didn't get set when a ipsec tunnel is restarted.
have a look at the picture and at the output from netstat -rn:
firewall:/root # netstat -rn
Kernel IP routing table
Destination Gateway Genmask Flags MSS Window irtt Iface
10.20.10.0 0.0.0.0 255.255.255.0 U 0 0 0 eth0
10.20.11.0 0.0.0.0 255.255.255.0 U 0 0 0 eth1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 lo
172.28.101.0 0.0.0.0 255.255.255.0 U 0 0 0 eth3
195.71.0.0 10.20.11.1 255.255.0.0 UG 0 0 0 eth1
firewall:/root #
the routes on the firewall are missing, thats why i can't reach the remotenetwork from the firewall!
Robert
