Note: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] Re: [Bugs] FS 1.97 and Virtual IP's

From: Michael Richardson (mcr_at_sandelman.ottawa.on.ca)
Date: Wed Jun 12 2002 - 04:48:22 CEST

Next message: Nate Carlson: "Re: [Users] Default Route"
Previous message: Mike Thomas: "Re: [Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Next in thread: Mike Thomas: "[Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Reply: Mike Thomas: "[Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Reply: D. Hugh Redelmeier: "[Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

-----BEGIN PGP SIGNED MESSAGE-----

So, the problem is that

route add -net 216.209.122.80 netmask 255.255.255.255 dev ipsec0 gw 198.64.129.1

fails. Looking at your ifconfig -a output, you have:

eth0 Link encap:Ethernet HWaddr 00:03:47:A5:55:DF
          inet addr:198.64.129.55 Bcast:198.64.129.63 Mask:255.255.255.192
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          RX packets:6089348 errors:0 dropped:0 overruns:0 frame:0
          TX packets:7541425 errors:0 dropped:0 overruns:0 carrier:5
          collisions:142736 txqueuelen:100
          Interrupt:21

0.0.0.0 198.64.129.1 0.0.0.0 UG 40 0 0 eth0

so, 129.1 is on the network. The problem is that it *isn't* reachable via
ipsec0. My suggestion is to add 198.64.129.55 as an alias if ipsec0
(i.e. ipsec0:1). Make sure that you add it with the right netmask.

Do this manually first, and try up'ing the conn.

You might even just be able to hack _startklips to add all of the aliases
from eth0 to ipsec0, and specify "eth0=ipsec0" instead.

eth0:1 Link encap:Ethernet HWaddr 00:03:47:A5:55:DF
          inet addr:198.64.133.69 Bcast:198.64.133.255 Mask:255.255.255.252
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          Interrupt:21

eth0:2 Link encap:Ethernet HWaddr 00:03:47:A5:55:DF
          inet addr:198.64.133.70 Bcast:198.64.133.255 Mask:255.255.255.252
          UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
          Interrupt:21

] ON HUMILITY: to err is human. To moo, bovine. | firewalls [
] Michael Richardson, Sandelman Software Works, Ottawa, ON |net architect[
] mcr_at_sandelman.ottawa.on.ca http://www.sandelman.ottawa.on.ca/ |device driver[
] panic("Just another NetBSD/notebook using, kernel hacking, security guy"); [

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: latin1
Comment: Finger me for keys

iQCVAwUBPQa2bYqHRg3pndX9AQHzkQQAiLvxWAD+xn3rwCnW4A1q5+z1IF1XGgDw
/oq2XIWTM3imJhGiy5mRi6tM1expicQ1ZDlMDPiufhjBp6pLlFDLPDk4xcQuQckF
pPaUxat03809PurnN/rZjZf100DzgiORXs2ZjkMLKd18tSKXtn/NSd09brSCs5q2
znLSZtbJqjQ=
=9TkM
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

Next message: Nate Carlson: "Re: [Users] Default Route"
Previous message: Mike Thomas: "Re: [Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Next in thread: Mike Thomas: "[Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Reply: Mike Thomas: "[Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Reply: D. Hugh Redelmeier: "[Users] Re: [Bugs] FS 1.97 and Virtual IP's"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:14 CEST