From owner-freebsd-questions  Thu Oct 31  2: 5:11 2002
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id EB02037B401
	for <freebsd-questions@freebsd.org>; Thu, 31 Oct 2002 02:05:09 -0800 (PST)
Received: from gadolinium.btinternet.com (gadolinium.btinternet.com [194.73.73.111])
	by mx1.FreeBSD.org (Postfix) with ESMTP id F219043E88
	for <freebsd-questions@freebsd.org>; Thu, 31 Oct 2002 02:05:03 -0800 (PST)
	(envelope-from wayne@penguinpowered.org.uk)
Received: from host217-35-10-192.in-addr.btopenworld.com ([217.35.10.192] helo=marvin.penguinpowered.org.uk)
	by gadolinium.btinternet.com with esmtp (Exim 3.22 #8)
	id 187CCE-0007hD-00; Thu, 31 Oct 2002 10:05:02 +0000
Received: from waynep by marvin.penguinpowered.org.uk with local (Exim 3.33 #1)
	id 187CKs-0000Ys-00; Thu, 31 Oct 2002 10:13:58 +0000
From: Wayne Pascoe <freebsd@penguinpowered.org.uk>
To: freebsd-questions@freebsd.org
Subject: VPN Not working
Date: 31 Oct 2002 10:13:57 +0000
Message-ID: <86d6pqud96.fsf@marvin.penguinpowered.org.uk>
Lines: 52
User-Agent: Gnus/5.0808 (Gnus v5.8.8) XEmacs/21.1 (Cuyahoga Valley)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Hi all,

I'm trying to setup up Tunneling VPN between two FreeBSD boxes.
I have network A talking through gateway A to Network B via gateway B

Network A IP Range - 192.168.11.0/24
Network B IP Range - 192.168.12.0/24

Gateway A Internal IP Address - 192.168.11.1
Gateway A External IP Address - 192.168.10.1

Gateway B Internal IP Address - 192.168.12.1
Gateway B External IP Address - 192.168.10.2

I have ip forwarding setup and with the VPN down, a machine behind the
first gateway, 192.168.11.2 can ping a machine behind the second
gateway, 192.168.12.2. As soon as I start the VPN up though, they
can't talk at all any more. Not ssh, not ping, not anything.

I am using the following scripts on Gateway A and B respectively to
start my VPN

#!/bin/bash
setkey -c <<EOF
spadd 192.168.11.0/24 192.168.12.0/24 any -P out ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
spadd 192.168.12.0/24 192.168.11.0/24 any -P in ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
add 192.168.10.1 192.168.10.2 ah-old 0x10003 -m any \
-A keyed-md5 "this is the test"
add 192.168.10.2 192.168.10.1 ah-old 0x10004 -m any \
-A keyed-md5 "this is the test"

#!/bin/bash
setkey -c <<EOF
spadd 192.168.12.0/24 192.168.11.0/24 any -P out ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
spadd 192.168.11.0/24 192.168.12.0/24 any -P in ipsec \
ah/tunnel/192.168.10.1-192.168.10.2/require ;
add 192.168.10.1 192.168.10.2 ah-old 0x10003 -m any \
-A keyed-md5 "this is the test"
add 192.168.10.2 192.168.10.1 ah-old 0x10004 -m any \
-A keyed-md5 "this is the test"

Anyone have any ideas ? 

TIA,

-- 
- Wayne Pascoe 
    Yoohoo... I'll make you famous
    

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message