Hello all,
I have edited the Original Email. I now can sum up the Problem in 50 lines or less [;)]
A little VPN Routing Problem.
Definitions:
eth0 - Internal Interface: 10.1.3.254 GW none
eth1 - PPPoE Interface: Dynamic GW: Dynamic
eth2 - External Interface: 217.xxx.xxx.253 (Leased-Line) GW: 217.xxx.xxx.254 (Cisco Router)
Gateway Order:
eth1 (all internal traffic MUST use the DSL, EXCEPT VPN traffic)
eth2
OK, so my VPN Tunnel Works. 10.1.2.0 is my Remote Network (also Dynamic), and 10.1.3.0 is my Local Network (connected to eth0)
25 10.1.2.0/24 -> 10.1.3.0/24 => tun0x1002@217.xxx.xxx.253
but right after the UPDOWN script trys to set a default route on the eth1 (DSL) interface (because its listed as the 1st gateway)
the correct interface would be eth2 using the Cisco IP as a gateway.
Live-Log from Local ASL:
Jun 20 09:49:35 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #3: responding to Main Mode from unknown peer 62.xxx.xxx.1
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #3: Peer ID is ID_FQDN: '@host.domain.com'
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #3: sent MR3, ISAKMP SA established
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #4: responding to Quick Mode
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #4: route-client output: SIOCADDRT: Network is unreachable
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #4: route-client output: /usr/local/lib/ipsec/_updown: `route add -net 10.1.2.0 netmask 255.255.255.0 dev ipsec0 gw 217.5.98.15' failed
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #4: route-client output: /usr/local/lib/ipsec/_updown: (incorrect or missing nexthop setting??)
Jun 20 09:49:36 fred Pluto[6672]: "VPN_1" 62.xxx.xxx.1 #4: route-client command exited with status 7
here is my local routing table.
217.5.98.15 dev ppp0 scope link
217.xxx.xxx.0/24 dev eth2 scope link
217.xxx.xxx.0/24 dev ipsec0 proto kernel scope link src 217.xxx.xxx.253
10.1.3.0/24 dev eth0 scope link src 10.1.3.253
10.1.3.0/24 dev eth0 scope link
127.0.0.0/8 dev lo scope link
default via 217.5.98.15 dev ppp0
default via 217.xxx.xxx.253 dev eth2
I tried to add various Static Routes on the CLI, however never seemed to get the packets routed correctly.
ideas [:S]
[size="1"][ 20 June 2002, 09:42: Message edited by: Tmor ][/size]
This thread was automatically locked due to age.
