/* HINT: Search archives @ http://www.indyramp.com/masq/ before posting! 
/* ALSO: Don't quote this header. It makes you look lame :-) */


Here is my problem:

I have 2 internals VPN servers( lets call them vpn1 and vpn2) behind 2 masquerading 
firewalls (fw1 and fw2)

vpn1 and vpn2 use Isakmpd (source port 500, destination port 500, UDP).
vpn1 sends Isakmpd messages to fw2. Those messages should be forwarded to vpn2.
vpn2 sends Isakmpd messages to fw1. Those messages should be forwarded to vpn1.

Port forwarding configuration is as follows :

* on fw1:
ipchains --append forward --interface ppp0 --proto udp --source vpn1 500 --destination 
fwl1 500 --jump MASQ
ipmasqadm portfw -a -P udp -L fw1 500 -R vpn1 500

* on fw2:
ipchains --append forward --interface ppp0 --proto udp --source vpn2 500 --destination 
fwl2 500 --jump MASQ
ipmasqadm portfw -a -P udp -L fw2 500 -R vpn2 500

Due to port forwarding, outgoing packets from vpn1 (source port 500) are mascaraded as 
fwl1 address, source port 500.
The same for vpn2.

Now, when I run isakmpd on the 2 vpns ,I get on fwl2:
IP_MASQ:Already used connection: UDP, fwl1:500 => fwl2:500, called from 00000011

Has anybody encoutered this message ?
What's wrong with my configuration ?

TIA


        Romain Guilleret

_______________________________________________
Masq maillist  -  [EMAIL PROTECTED]
Admin requests can be handled at http://www.indyramp.com/masq-list/ -- 
THIS INCLUDES UNSUBSCRIBING!
or email to [EMAIL PROTECTED]

PLEASE read the HOWTO and search the archives before posting.
You can start your search at http://www.indyramp.com/masq/
Please keep general linux/unix/pc/internet questions off the list.

Reply via email to