After yanking several handfulls of hair from my head, I finally got my VPN lab 
fully functional and tested.  Thanks to all those here who helped.  

I am in the process of documenting the process I used --- skipping all the 
false starts, dead-ends, and hand-wringing ;-) I'll be interested in the 
opinions of list members on how this works out.  It is intended to be very 
similar to Richard Lohmans very fine "baby-steps" documentation -- kind of 
cookbook style, with no assumptions built in.  Anyone interested in 
participating, please let me know.

One key observation that I'd like clarification on: Routing Non-routable 
Addresses in Dachstein.  

I followed a rough lab setup I found on the 'net, that used generic Red Hat 
boxes for each tunnel endpoint, with a dual NIC Red Hat box between them doing 
vanilla ip forwarding.  I followed the diagrams to the letter so I couldn't get 
lost, but in the end, nothing worked.  It appears to me that using the author's 
private IPs on eth0 of a DCD box just doesn't work.  DCD seems to be enforcing 
the non-routable rule.  I changed all my 172.16 networks to 174.16 networks, 
and the floodgates opened up.  Questions:

1.  Is my observation correct?  Is the LRP/DCD code enforcing the non-routable 
rule?

2.  Where does this code live/how can it be deactivated or reconfigured?


Thanks,

Dan

_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to