I have an IPSec tunnel setup across a wireless link that I'm trying to
get right. Here's the layout:
Local lan - wireless bridge - wireless bridge - remote lan
What I have currently requires some babysitting if the Bering 1.2 box
on the remote lan gets reset. The routing is a mess when it comes up. I
think part of the problem is the IP addressing, which is as follows:
Local:
2: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 02:00:07:e3:92:1e brd ff:ff:ff:ff:ff:ff
inet 208.191.32.34/29 brd 208.191.32.39 scope global eth0
3: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:e0:18:26:a4:51 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.1/24 brd 10.0.0.255 scope global eth1
4: ipsec0: <NOARP,UP> mtu 16260 qdisc pfifo_fast qlen 10
link/ether 00:e0:18:26:a4:51 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.1/24 brd 10.0.0.255 scope global ipsec0
Remote:
3: eth0: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:02:e3:15:ce:69 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.40/24 brd 10.0.0.255 scope global eth0
4: eth1: <BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast qlen 100
link/ether 00:40:63:c0:93:2a brd ff:ff:ff:ff:ff:ff
inet 10.0.1.254/24 brd 10.0.1.255 scope global eth1
5: ipsec0: <NOARP,UP> mtu 16260 qdisc pfifo_fast qlen 10
link/ether 00:02:e3:15:ce:69 brd ff:ff:ff:ff:ff:ff
inet 10.0.0.40/24 brd 10.0.0.255 scope global ipsec0
This is the working configuration. The local end is a RH box that
connects to the local LAN (10.0.0.0/24) and the wireless bridge, and
does IP Masq for both networks. The remote is a Bering 1.2 that connects
to the LAN (10.0.1.0/24) and the wireless bridge on that end. When the
Bering box reboots, the default route is out eth0, not ipsec0. I'm not
sure if this is a configuration error, or if it's because of the IP
layout with both ends of the IPSec tunnel being in the same netblock.
I'm replacing the RH box with another Bering 1.2 box, and would like to
clean up this mess at the same time. Any thoughts or links appreciated.
--
Homer Parker /"\ ASCII Ribbon Campaign
\ / No HTML/RTF in email
http://www.homershut.net x No Word docs in email
telnet://bbs.homershut.net / \ Respect for open standards
"Bill Gates reports on security progress made and the challenges ahead."
-- Microsoft's Homepage, on the day an SQL Server bug crippled large
sections of the Internet.
-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
------------------------------------------------------------------------
leaf-user mailing list: [EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user
SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
