Frode Marton Meling wrote:

>>   
> I have not looked at tcpdump yet.
> I do not have Cisco switches, only HP.
> The strange part is that the default gateway on green is pingable (so in 
> my case 192.168.3.1 is pingable but 192.168.3.9 is not, when client have 
> 192.168.3.60 as IPadress)
> Looking forward to your research..


I have not solved it on site yet and I'm heading out to lunch. BUT when I 
brough up my test box and attached a laptop to the inside interface I was able 
to ssh and ping through the vpn tunnel to it no problem. So I do not think 
Endian's setup has anything to do with this. The production network has lots of 
cisco switches and I think something is block or mis-directing traffic because 
I can see almost everything accept the final reply coming back into the 
firewall.

Just fyi I use this to connect to openvpn

sudo /usr/sbin/openvpn --client --pull --comp-lzo --dev tap --ca 
/home/mgt/.openvpn/kraken.pem --auth-user-pass --remote kraken


Where the pem file is what I downloaded from the firewall. Nothing specially 
there and it works fine on my simple test box.

-Mike


-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Efw-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/efw-user

Reply via email to