Hi,

> Some more info always helps.
> FS box is a gateway to a network, masquerades clients behind it,
connected by
> ADSL using pppoe. Setting up VPN between windows XP RW direct to gateway of
> network.
>
> I have pretty much assumed that the problem is not freeswan, but rather the
> routing tables making assumptions on IP.
>
> my routing tables starts out as:
>
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 202.59.96.1     *               255.255.255.255 UH                  0
> ppp0
> 202.59.96.1     *               255.255.255.255 UH                  0
> ipsec0
> 172.16.34.0     *               255.255.255.0   U                   0
> eth1
> loopback        *               255.0.0.0       U                    lo
> default         202.59.96.1     0.0.0.0         UG                  0
> ppp0
>
> and then after 24hours (adsl provider forces temporary disconnect) it
> moves to
>
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use
> Iface
> 202.59.96.1     *               255.255.255.255 UH                  0
> ppp0
> 202.59.96.1     *               255.255.255.255 UH                  0
> ipsec0
> 172.16.34.0     *               255.255.255.0   U                   0
> eth1
> loopback        *               255.0.0.0       U                    lo
> default         202.59.96.1     0.0.0.0         UG                  0
> ipsec0
>
> It seems it happens because the kernel routing tables daemon or somesuch
> thing
> just finds the closest interface to an IP, and comes up with ipsec0. When
> the
> ppp0 iface comes back up it doesn't reestablish the default route back to
> ppp0.
>
> This must be a fairly common problem, how do people correct this ?

We had the exact same issue :(
What I don't understand is why pppd doesn't move the default route back to
the ppp0 when it becomes active again, even when started with the
defaultroute option.
However, our solution is to stop FreeS/Wan from ip-down and start
FreeS/Wan from ip-up.  Works like a charm.

Kind regards,

Mark Wormgoor
-- 
***************************************************************
* |\    /|      |  /|  /       Mark Wormgoor                  *
* | \  / |      | / | /        mailto:[EMAIL PROTECTED]       *
* |  \/  |ark   |/  |/ormgoor  http://www.wormgoor.com/mark/  *
***************************************************************

Reply via email to