[pptp-server] Fw: [LRP] cant ping the client and others

[Christopher Kuhl]

-----Original Message-----
From: Christopher Kuhl <chrisk at ciris.net>
To: linux-router at linuxrouter.org <linux-router at linuxrouter.org>; Ray
Olszewski <ray at comarre.com>
Date: Friday, November 05, 1999 4:49 PM
Subject: Re: [LRP] cant ping the client and others


>I finally got it working today, and as always, the answer was simple to fix
>but hard to find.  It turns out the the firewall was stopping it.  I add
>"ipfwadm -F -a accept -W eht0" to let the router forward back out on my
>network and boom, problem solved.  No hardware problem, no routing problem.
>-----Original Message-----
>From: Ray Olszewski <ray at comarre.com>
>To: Christopher Kuhl <chrisk at ciris.net>; linux-router at linuxrouter.org
><linux-router at linuxrouter.org>
>Date: Thursday, November 04, 1999 7:04 PM
>Subject: Re: [LRP] cant ping the client and others
>
>
>>Since you've posted this question several times without getting a
response,
>>I assume there aren't any experts on this stuff hanging out on this list.
>>I'm no expert, but my next project will be to implement one of the VPN
>>technologies, so I took a little tilme to look over your setup. Bearing in
>>mind my limited expertise here, I have one thought ...
>>
>>How are these two routers actually connected? You show them as connected
>>through "internet", which I intrepret to mean that each connects to an
ISP,
>>and the ISPs find a route between the two LANs. Under that assumption,
what
>>is the "remote ip that is passed by pppd" address you are giving to the
>>client? I would normally think of this phrase as referring to the ISP's
end
>>of the PPP connection to the client. If that is what you mean, why would
>>that host know how to route to your private subnet-10 network on the other
>>end? I would think that each of the routers needs the ppp address of the
>>other router here (or they need to be masq'd, which you say works, at
least
>>after a fsahion).
>>
>>Apologies in advance if I've misinterpreted your posting. I'll be happy to
>>take a closer look at your configuration if you're interested, but pleas
>>understand that I'm offering because I need to figure this stuff out too,
>>not because I already have any great expertise in it. Good luck in any
>case.
>>
>>At 02:07 PM 11/4/99 -0600, Christopher Kuhl wrote [in part]:
>>My setup is this:
>>>
>>>private
>>>network(10.111.1.0/24)-----LRP+POPTOP(10.111.1.1)--------internet------LR
P
>+P
>>>PTP client(10.111.200.1)-----private network(10.111.200.0/24)
>>>
>>>I am using poptop on one side and the linux pptp client on the other.
>When
>>>I connect to the Poptop server with a Windows machine I can ping and use
>the
>>>entire network fine.  But from the linux pptp client, I can only ping the
>>>Poptop router(ping 10.111.1.1) and vice versa.  I can not ping other
>>>machines on the remote network.  I changed my ip-up and down scripts to
>add
>>>and delete routes like this
>>>
>>>Poptop side:
>>>route add -net 10.111.200.0 netmask 255.255.255.0 gw $5 $1   ;  $5 is the
>ip
>>>address I am giving the client router.
>>>
>>>Cleint side:
>>>route add -net 10.111.1.0 netmask 255.255.255.0 gw $5 $1   ; $5 is the
>>>remote ip that is passed by pppd.
>>>
>>>I checked my routing tables, and they are correct.  I also delete these
>>>routes when ip-down runs.
>>[rest deleted]
>>
>>------------------------------------"Never tell me the odds!"---
>>Ray Olszewski                                        -- Han Solo
>>Palo Alto, CA                    ray at comarre.com
>>----------------------------------------------------------------
>>
>>
>>
>>_______________________________________________
>>linux-router maillist  -  linux-router at linuxrouter.org
>>http://www.linuxrouter.org/mailman/listinfo/linux-router
>>
>