<< | Thread Index | >> ]    [ << | Date Index | >> ]

Subject: Re: Final resort CIPE routing question
From: "mikeeo" <mikeeo,AT,email,DOT,msn,DOT,com>
Date: Tue, 9 Jan 2001 16:01:23 +0100
In-reply-to: <003101c07a48$2d0bb5b0$be01a8c0@trollslayer>

Hmmm....did ya try adding gateways for the CIPE interfaces? eg. route
add -net 192.168.1.0 netmask 255.255.255.0 gw cipcb0? that way all packets
destin for 192.168.1.0 will go out the cipe interface, anything not matching
will goto the default route.

just my 2 cents

-Mike
----- Original Message -----
From: "Yannick Vansevenant" <yannick.vansevenant,AT,mobyus,DOT,com>
To: <cipe-l,AT,inka,DOT,de>
Sent: Tuesday, January 09, 2001 9:26 AM
Subject: Final resort CIPE routing question

> Hello,
>
> I am still trying to get this cipe vpn connection going between two sites
:
> callisto and crux.
> Pinging between the two servers work :
>
> [blitter@callisto blitter]$ ping 192.168.0.18
> PING 192.168.0.18 (192.168.0.18) from 192.168.1.252 : 56(84) bytes of
data.
> 64 bytes from 192.168.0.18: icmp_seq=47 ttl=255 time=626.6 ms
> 64 bytes from 192.168.0.18: icmp_seq=48 ttl=255 time=149.7 ms
>
> but pinging to the other network gives problems :
>
> [blitter@callisto blitter]$ ping 192.168.0.103
> PING 192.168.0.103 (192.168.0.103) from 192.168.1.252 : 56(84) bytes of
> data.
> From 192.168.0.252: Destination Host Unreachable
> From 192.168.0.252: Destination Host Unreachable
> From 192.168.0.252: Destination Host Unreachable
>
> the two routing tables are :
>
> [blitter@callisto blitter]$ route
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 192.168.0.252   *      255.255.255.255 UH    0      0        0 cipcb0
> 255.255.255.255 *    255.255.255.255 UH    0      0        0 eth1
> 192.168.1.45    *       255.255.255.255 UH    0      0        0 eth1
> 194.7.177.163   *      255.255.255.255 UH    0      0        0 eth0
> 192.168.1.0     *        255.255.255.0   U     0      0        0 eth1
> 192.168.0.0     *       255.255.255.0   U     0      0        0 cipcb0
> 127.0.0.0       *         255.0.0.0       U     0      0        0 lo
> default   uu194-7-177-161 0.0.0.0         UG    0      0        0 eth0
>
> [root@crux /root]# route
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 192.168.0.10    localhost  255.255.255.255 UGH   0      0        0 lo
> 192.168.0.15    localhost  255.255.255.255 UGH   0      0        0 lo
> 192.168.1.252   *       255.255.255.255 UH    0      0        0 cipcb0
> 192.168.0.131   localhost  255.255.255.255 UGH   0      0        0 lo
> 192.168.254.0   *         255.255.255.240 U     0      0        0 eth0
> 192.168.1.0     *       255.255.255.0   U     0      0        0 cipcb0
> 192.168.0.0     *       255.255.255.0   U     0      0        0 eth1
> 127.0.0.0       *         255.0.0.0       U     0      0        0 lo
> default   192.168.254.1   0.0.0.0         UG    0      0        0 eth0
>
> The roughly sketch the network : callisto is visible on the internet, crux
> is behind a router which isn't owned by us and for which I demanded to
open
> a port for the cipe connection to work in the first place
>
> And on the clients in the network, even if the gateway is set correctly,
> pinging does not work to the internal adres on the server (which works
> on the opposite server :
>
> On  the 192.168.1.0 network :
>
> c:\>ping 192.168.0.18
>
> Pinging 192.168.0.18 with 32 bytes of data:
>
> Request timed out.
> Request timed out.
>
> In fact it is like the cipe interface doesn't know where to find the
> internal network ... although kernel forwarding is active, firewalls on
the
> cipe connection are very loose and firewall on the real interface seem
okay
> because that pinging works.
>
> Can anyone indicate to me in which direction to continue ? Do I have to
> continue to explore the route command ?
> In an attempt to correct this problem, I pointed all internal traffic
> through the cipe interface but this did seem to crash our internal network
> ;-)
>
> Best of greetings and thank you in advance !!
>
>
> --
> Message sent by the cipe-l,AT,inka,DOT,de mailing list.
> Unsubscribe: mail majordomo,AT,inka,DOT,de, "unsubscribe cipe-l" in body
> Other commands available with "help" in body to the same address.
> CIPE info and list archive:
<URL:http://sites.inka.de/~bigred/devel/cipe.html>





<< | Thread Index | >> ]    [ << | Date Index | >> ]