The only way to know for sure is mimic the setup MTC CSR's support.  If the
normal method is connecting with a windows vpn client, you will have to try
that from your wife's computer.  If it doesn't work, I would say you can go
to them with concrete proof that something is b0rked between wymount and
mtc.  We linux users know the drill...

"hello comcast/other isp .... The internet is down..."
"okay open internet explorer..."
"I don't have internet explorer, will konquerer work?"
"...  Uhhhh...  I'm sorry we don't support that call back later <click>.."
"b-b-b-ut!!!"

Richard Lyman scribbled on Friday, March 03, 2006 4:02 PM:

> On 3/3/06, Brian Phillips <[EMAIL PROTECTED]> wrote:
>> 
>> Is this with or without "Target networks" set in the config file?
>> 
> 
> With. I'd like to run it all again with iftop and see what really is
> the key to getting the outbound traffic I saw today. It'd be nice to
> know if I really need the 'udp' and 'Target Networks' options or not.
> 
>> 
>> Good stuff.  It could be that the --udp option is necessary then,
>> since it will send tunnel traffic in a one-way fashion and not wait
>> for a response. 
>> Some TCP blocking could be going on.  Do other members of your work
>> (who use the VPN) have it set to transport Ipsec/UDP or Ipsec/TCP (it
>> should be the far right hand column of their vpn client.)?
>> 
> 
> I'll try to find out.
> 
>> Do you have any iptables rules on the local machine after your
>> connection is made?  "# iptables -L"
>> 
> 
> I run firestarter - and I turn my firewall off when I'm running these
> tests so that it doesn't get in the way. 'iptables -L' shows that
> there are no filtering rules at the time.  
> 
>> Wymount shouldn't be the problem.  I VPN to OIT's vpn concentrator
>> all 
>> the time (and remote desktop).  If there is a problem with Wymount,
>> it 
>> would be the network admin for the MTC that needs to do some
>> fiddling. 
>> Double check by getting the vpn client on your wife's computer
>> though. 
>> You never know what rules are buried deep inside the network.  Like
>> I've said before, the MTC is one of the special cases when it comes
>> to 
>> network traffic and is secured tighter than most campus buildings.
>> Campus housing and wireless public are analagous to leper colonies
>> when it comes to network traffic. 
>> 
>> Brian
> 
> Hum. I guess there _could_ be something buried in their stuff that
> says that Wymount is offlimits to outgoing VPN traffic... I'll ask. 
> 
> So, does this 'prove' that the problem is not on my end? It seems
> like I still don't know for sure either way. 
> 
> -Rich
> 
> --------------------
> BYU Unix Users Group
> http://uug.byu.edu/
> 
> The opinions expressed in this message are the responsibility of
> their author.  They are not endorsed by BYU, the BYU CS Department or
> BYU-UUG.
> ___________________________________________________________________  
> List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list


--------------------
BYU Unix Users Group 
http://uug.byu.edu/ 

The opinions expressed in this message are the responsibility of their
author.  They are not endorsed by BYU, the BYU CS Department or BYU-UUG. 
___________________________________________________________________
List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list

Reply via email to