On Wed, 2006-03-01 at 21:47 -0700, Brian Phillips wrote:
> I would not think this is the case.  I often will use VPN from work on a
> campus 10.25.xx.xx address to the vpn subnet of 10.0.xx.xx.  My
> understanding is that it depends on the VPN client (that's what calculates
> the routes, not the actual hardware your computer is plugged into).
> Anything beyond your computer just sees the packets as all originating from
> your REAL ip address... VPN stuff is just encrypted and all packets bound
> for the concentrator you are connected to.  

Everything depends on the routes.  If the same network he is going out
on happens to be matched by a route assigned to the vpn connection,
you'll definitely have problems. That was my point.  Routing is the
first thing I'd check into.

> 
> I would be interested...  In windows when you use the Cisco VPN client
> (assuming you do) does it use Ipsec/UDP or Ipsec/TCP ?  Wymount is pretty
> restricted and the MTC even more.  I wonder if it's along the lines of a UDP
> connection making it when a TCP connection cant.

The Cisco client defaults to udp (udp encapsulation of ipsec).  The vpnc
program defaults to using a special protocol (something to do with
ipsec) called "ESP."  If you pass vpnc the --udp flag, it defaults to
udp packets.  (I think).  I'd definitely try the --udp flag to force
vpnc to use the udp encapsulation.

Michael


> 
> Brian
> 
> 
> --------------------
> BYU Unix Users Group 
> http://uug.byu.edu/ 
> 
> The opinions expressed in this message are the responsibility of their
> author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
> ___________________________________________________________________
> List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list

--------------------
BYU Unix Users Group 
http://uug.byu.edu/ 

The opinions expressed in this message are the responsibility of their
author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list

Reply via email to