From owner-freebsd-net@FreeBSD.ORG  Mon Jan 23 20:29:08 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: freebsd-net@freebsd.org
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 2FF9116A42C
	for <freebsd-net@freebsd.org>; Mon, 23 Jan 2006 20:29:08 +0000 (GMT)
	(envelope-from nielsen-list@memberwebs.com)
Received: from mail.npubs.com (mail.zoneseven.net [209.66.100.224])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 0057A43D49
	for <freebsd-net@freebsd.org>; Mon, 23 Jan 2006 20:29:07 +0000 (GMT)
	(envelope-from nielsen-list@memberwebs.com)
From: Nate Nielsen <nielsen-list@memberwebs.com>
User-Agent: Mozilla Thunderbird 1.0.7 (X11/20051013)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Tiago Cruz <tiagocruz@b4br.net>
References: <1138044412.4224.21.camel@localhost.localdomain>
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
Message-Id: <20060123204939.A46D4DCAA42@mail.npubs.com>
X-Virus-Scanned: ClamAV using ClamSMTP
Date: Mon, 23 Jan 2006 20:49:40 +0000 (GMT)
Cc: freebsd-net@freebsd.org
Subject: Re: VPN when host is not gateway
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
Reply-To: nielsen@memberwebs.com
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Mon, 23 Jan 2006 20:29:08 -0000

Tiago Cruz wrote:
> If I install the VPN in my gateway (192.168.0.1), the laptop client host
> (Windows XP) is able to ping my virtual server (10.8.0.1), my gateway
> (192.168.0.1) and all my LAN (192.168.0.0/22).
> 
> If I install the VPN in my gateway backup (192.168.0.253, with CARP),
> the laptop client is able to ping my virtual server (10.8.0.1), my
> gateway (192.168.0.1) but NOT is able to ping my LAN (192.168.0.0/22).
> 
> I think that is missing some route, and because this I go to get some
> tip...

I'd use tcpdump on the various interfaces (tap devices, ethernet) on the
machines in question to see exactly at which host is not forwarding the
packets properly and where they're going.

Cheers,
Nate