Hi all,

I'm trying to setup up Tunneling VPN between two FreeBSD boxes.
I have network A talking through gateway A to Network B via gateway B

Network A IP Range - 192.168.11.0/24
Network B IP Range - 192.168.12.0/24

Gateway A Internal IP Address - 192.168.11.1
Gateway A External IP Address - 192.168.10.1

Gateway B Internal IP Address - 192.168.12.1
Gateway B External IP Address - 192.168.10.2

I have ip forwarding setup and with the VPN down, a machine behind the
first gateway, 192.168.11.2 can ping a machine behind the second
gateway, 192.168.12.2. As soon as I start the VPN up though, they
can't talk at all any more. Not ssh, not ping, not anything.

I am using the following scripts on Gateway A and B respectively to
start my VPN

#!/bin/bash
setkey -c <<EOF
spadd 192.168.11.0/24 192.168.12.0/24 any -P out ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
spadd 192.168.12.0/24 192.168.11.0/24 any -P in ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
add 192.168.10.1 192.168.10.2 ah-old 0x10003 -m any \
-A keyed-md5 "this is the test"
add 192.168.10.2 192.168.10.1 ah-old 0x10004 -m any \
-A keyed-md5 "this is the test"

#!/bin/bash
setkey -c <<EOF
spadd 192.168.12.0/24 192.168.11.0/24 any -P out ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
spadd 192.168.11.0/24 192.168.12.0/24 any -P in ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
add 192.168.10.1 192.168.10.2 ah-old 0x10003 -m any \
-A keyed-md5 "this is the test"
add 192.168.10.2 192.168.10.1 ah-old 0x10004 -m any \
-A keyed-md5 "this is the test"

Anyone have any ideas ? 

TIA,

-- 
- Wayne Pascoe 
    Yoohoo... I'll make you famous
    

To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-questions" in the body of the message

Reply via email to