RE: [Users] Cant pass traffic through the VPN?!?!

turnerd_at_airg.com

--
Dayton Turner
-----Original Message-----
From: Henry Spencer [mailto:henry_at_spsystems.net] 
Sent: Monday, March 25, 2002 10:11 PM
To: Dayton Turner
Cc: users_at_lists.freeswan.org
Subject: Re: [Users] Cant pass traffic through the VPN?!?!
On Mon, 25 Mar 2002, Dayton Turner wrote:
> ...One machine (.64) is actually a vmware
> window :P  but it has a real ip, and communicates perfectly fine 
> normally, so I don't see this as an issue.
It might be.  IPsec has a somewhat incestuous relationship with the
hardware drivers, and I don't know whether anybody's ever tried it under
VMware, which has to do some high and fancy fakery to give an imitation
of PC hardware. 
> Now when I ping or telnet or whatever between them, no traffic makes 
> it through. Tcpdump on either end verifies that the packets arent 
> making it.
"tcpdump -i ipsec0" will help confirm that the packets are actually
getting into the IPsec machinery.
Given that, "ifconfig ipsec0" is of interest -- if its "dropped"  count
is incrementing, then the problem is in IPsec.  If not, then the packets
are getting lost somewhere after we process them, and it is almost
certainly not an IPsec problem.
                                                          Henry Spencer
 
henry_at_spsystems.net
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users