Hi--
We have a standard Linux 2.0 masquerading gateway set up, a single static IP
is being masqueraded onto the 10.0.1.0 network.
I set up a VPN using an ssh/pppd tunnel to an internal network at a remote
site, on 10.0.2.0 network. This was done according to the VPN mini-howto
(http://metalab.unc.edu/LDP/HOWTO/mini/VPN.html).
Unfortunately the VPN guide doesn't seem to indicate how to _add_ a VPN
network to an existing masq gateway.
The problem:
* 10.0.1.0 boxes can ping the Internet via masq gateway
* 10.0.2.0 boxes can ping the Internet via masq gateway
* 10.0.1.0 gateway can ping 10.0.2.0 gateway (so the tunnel is up)
* 10.0.1.0 boxes _cannot_ ping 10.0.2.0 boxes (tunnel routing/masq
doesn't work)
I think I have to add some ipfwadm rules to get the 10.0.1.0 network to
forward to the 10.0.2.0 network. Is there a guide or something that shows
how to do this?
Any help would be greatly appreciated. The routing tables and ipfwadm
forwarding rules are listed below. There are no rules other than
forwarding rules. (note - the first forwarding rule I added after setting up the
tunnel, so it may be bogus)
Thanks,
Jeff
-----------------------------------------------------------------------------
Atlanta gateway (10.0.1.0 network, 10.0.1.16 IP, 192.168.0.1 ssh/PPP gateway)
-----------------------------------------------------------------------------
[root@finale sbin]# route -n ; ipfwadm -F -l
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.0.1.254 0.0.0.0 255.255.255.255 UH 0 0 0 eth0:0
207.15.208.16 0.0.0.0 255.255.255.255 UH 0 0 2 ppp0
192.168.0.2 0.0.0.0 255.255.255.255 UH 0 0 3 ppp1
10.0.1.0 0.0.0.0 255.255.255.0 U 0 0 820 eth0
10.0.2.0 192.168.0.2 255.255.255.0 UG 0 0 6 ppp1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 324 lo
0.0.0.0 207.15.208.16 0.0.0.0 UG 0 0 4947 ppp0
IP firewall forward rules, default policy: deny
type prot source destination ports
acc all 10.0.1.0/24 10.0.2.0/24 n/a
acc/m all 10.0.1.0/24 anywhere n/a
----------------------------------------------------------------------------
Austin gateway (10.0.2.0 network, 10.0.2.11 IP, 192.168.0.2 ssh/PPP gateway)
----------------------------------------------------------------------------
[root@hatred slave]# route -n ; ipfwadm -F -l
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
207.8.124.50 0.0.0.0 255.255.255.255 UH 0 0 0 ppp0
192.168.0.1 0.0.0.0 255.255.255.255 UH 0 0 4 ppp1
10.0.2.0 0.0.0.0 255.255.255.0 U 0 0 760 eth0
10.0.1.0 192.168.0.1 255.255.255.0 UG 0 0 2 ppp1
127.0.0.0 0.0.0.0 255.0.0.0 U 0 0 63 lo
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 8487 ppp0
0.0.0.0 10.0.2.11 0.0.0.0 UG 0 0 2 eth0
IP firewall forward rules, default policy: deny
type prot source destination ports
acc all 10.0.2.0/24 10.0.1.0/24 n/a
acc/m all 10.0.2.0/24 anywhere n/a
_______________________________________________
Masq maillist - [EMAIL PROTECTED]
http://tiffany.indyramp.com/mailman/listinfo/masq
Admin requests can be handled by web (above) or [EMAIL PROTECTED]
