From owner-freebsd-questions@FreeBSD.ORG Thu Sep 25 14:25:42 2014 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 9D28F992 for ; Thu, 25 Sep 2014 14:25:42 +0000 (UTC) Received: from mout.gmx.net (mout.gmx.net [212.227.17.20]) (using TLSv1.2 with cipher DHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mout.gmx.net", Issuer "TeleSec ServerPass DE-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 351BD63C for ; Thu, 25 Sep 2014 14:25:42 +0000 (UTC) Received: from [192.168.0.197] ([95.91.231.78]) by mail.gmx.com (mrgmx102) with ESMTPSA (Nemesis) id 0M82zV-1YSr2234K1-00vcdM; Thu, 25 Sep 2014 16:20:19 +0200 Message-ID: <542424A2.6080408@gmx.de> Date: Thu, 25 Sep 2014 16:20:18 +0200 From: "lokadamus@gmx.de" User-Agent: Mozilla/5.0 (X11; FreeBSD i386; rv:31.0) Gecko/20100101 Thunderbird/31.1.0 MIME-Version: 1.0 To: Zhi-Qiang Lei , freebsd-questions@freebsd.org Subject: Re: VPN client cannot receive packets References: <6AF0AAAB-E7F2-4FA7-81E5-223DA924DDE1@gmail.com> In-Reply-To: <6AF0AAAB-E7F2-4FA7-81E5-223DA924DDE1@gmail.com> Content-Type: text/plain; charset=windows-1252; format=flowed Content-Transfer-Encoding: 7bit X-Provags-ID: V03:K0:r/m93A7uv3vw+DT5xs/evbu3wkcoNzGJ/NwFllvJp1MJtgVtY6O bCoTCzkTwJE6SzcDea3EQ84VBzR/P5R8xHTsG/tAuNWyGHGF/h+JNZ01X0KaIcDE3cl2rSF GRl4dp5WXCaqINnxiwbtnbm0fAIDk9fIWE17G/TJdhiLRtSZi0YB1IkKrXX1m+XLrbrAA5b XoIYaIE8xk0e0/CVgfpzQ== X-UI-Out-Filterresults: notjunk:1; X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.18-1 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 25 Sep 2014 14:25:42 -0000 On 25.09.2014 08:48, Zhi-Qiang Lei wrote: > I setup a L2TP/IPsec VPN as this article: > > http://wiki.stocksy.co.uk/wiki/L2TP_VPN_in_FreeBSD > > My problem is that the connected clients cannot receive packets, however, sending is okay. > > Here are the tcpdump results if I tried to ping 8.8.8.8: > > root@freebsd-7638:~ # tcpdump -i vtnet0 icmp > tcpdump: verbose output suppressed, use -v or -vv for full protocol decode > listening on vtnet0, link-type EN10MB (Ethernet), capture size 65535 bytes > 05:55:17.630770 IP 192.168.99.150 > google-public-dns-a.google.com: ICMP echo request, id 36697, seq 0, length 64 > 05:55:18.627825 IP 192.168.99.150 > google-public-dns-a.google.com: ICMP echo request, id 36697, seq 1, length 64 > 05:55:19.624058 IP 192.168.99.150 > google-public-dns-a.google.com: ICMP echo request, id 36697, seq 2, length 64 > 05:55:20.618946 IP 192.168.99.150 > google-public-dns-a.google.com: ICMP echo request, id 36697, seq 3, length 64 > 05:55:21.622551 IP 192.168.99.150 > google-public-dns-a.google.com: ICMP echo request, id 36697, seq 4, length 64 > > What could be wrong? And how can I troubleshoot? You may reply on SuperUser if you want, thanks in advance. > > http://superuser.com/questions/816485/cannot-receive-packets > > Best regards, > Zhi-Qiang Lei > zhiqiang.lei@gmail.com > > _______________________________________________ > freebsd-questions@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-questions > To unsubscribe, send any mail to "freebsd-questions-unsubscribe@freebsd.org" > Hi, Is this your router/ firewall with internet connection? Look with tcpdump for traffic at 8.8.8.8. So you can see, if traffic comes back or is missing before your vpn system. Best regards