VPN IPsec Help

2010-07-07 Thread Matheus Weber da Conceição
Hello guys; I'm using a FreeBSD 7.0 in my firewall/gateway, and I have to connect via VPN to a Cisco box. The scene here is: * Peer A (Cisco): 200.xxx.xxx.xxx IPs that Peer B need to access: - 192.168.10.24 - 192.168.201.196 - 10.115.90.236 * Peer B (FreeBSD 7.0): 187.yyy.y

Re: VPN IPsec Help

2010-07-08 Thread Steve Bertrand
On 2010.07.07 18:28, Matheus Weber da Conceição wrote: > Hello guys; > > I'm using a FreeBSD 7.0 in my firewall/gateway, and I have to connect > via VPN to a Cisco box. > > The scene here is: > > * Peer A (Cisco): 200.xxx.xxx.xxx >IPs that Peer B need to access: > - 192.168.10.24 >

Re: VPN IPsec Help

2010-07-08 Thread Matheus Weber da Conceição
> It has been a long time since I've done IPSec on FBSD, but I'm willing > to bet that this has to do with routing, possibly amongst other things. > On peer 'B' (FBSD box), what internal IP range are you trying to access > the A network from...the same ones (ie. are you trying to bridge the > netwo

Re: VPN IPsec Help

2010-07-08 Thread Steve Bertrand
On 2010.07.08 10:00, Matheus Weber da Conceição wrote: >> It has been a long time since I've done IPSec on FBSD, but I'm willing >> to bet that this has to do with routing, possibly amongst other things. >> On peer 'B' (FBSD box), what internal IP range are you trying to access >> the A network fro

Re: VPN IPsec Help

2010-07-08 Thread Steve Bertrand
On 2010.07.08 10:51, Steve Bertrand wrote: > On 2010.07.08 10:00, Matheus Weber da Conceição wrote: >>> It has been a long time since I've done IPSec on FBSD, but I'm willing >>> to bet that this has to do with routing, possibly amongst other things. >>> On peer 'B' (FBSD box), what internal IP ran

Re: VPN IPsec Help

2010-07-08 Thread Steve Bertrand
On 2010.07.08 10:54, Steve Bertrand wrote: > On 2010.07.08 10:51, Steve Bertrand wrote: >> On 2010.07.08 10:00, Matheus Weber da Conceição wrote: It has been a long time since I've done IPSec on FBSD, but I'm willing to bet that this has to do with routing, possibly amongst other things.

Re: VPN IPsec Help

2010-07-08 Thread Matheus Weber da Conceição
> % route add 192.168.10.24/32 200.x.x.x > % route add 192.168.201.196/32 200.x.x.x > % route add 10.115.90.236/32 200.x.x.x add net 192.168.10.24: gateway 200.x.x.x: Network is unreachable -- Matheus Weber da Conceição ___ f

Re: VPN IPsec Help

2010-07-09 Thread Matheus Weber da Conceição
>> % route add 192.168.10.24/32 200.x.x.x >> % route add 192.168.201.196/32 200.x.x.x >> % route add 10.115.90.236/32 200.x.x.x > add net 192.168.10.24: gateway 200.x.x.x: Network is unreachable > -- The kernel will not create routes automatically? -- Matheus Weber