No subject

word somewhere or having an incorrect left or right side statement.

Can you try to add the arp entry manually?

/sbin/arp -s 192.168.x.x c0:0f:fe:ba:be pub

Replace IP and mac address as appropriate

dave

--=20
Dave Weis
515-224-9229
djweis at internetsolver.com
http://www.internetsolver.com/=20
Please check out our Complete Support Service=20
http://www.internetsolver.com/completesupport/=20

=20

> -----Original Message-----
> From: cialug-bounces at cialug.org=20
> [mailto:cialug-bounces at cialug.org] On Behalf Of Jonathan C. Bailey
> Sent: Wednesday, September 08, 2010 9:07 AM
> To: Central Iowa Linux Users Group
> Subject: Re: [Cialug] IPSec VPN not passing traffic
>=20
> Yes, our core router has a route for 192.168.22.0/24 via=20
> 10.81.10.60. Forwarding is also enabled on 10.81.10.60.
>=20
> Whenever 10.81.10.60 gets traffic for a connected VPN user,=20
> it sends out ARP requests like it doesn't know about that user.
>=20
> Jonathan Bailey
> Marshall County, Iowa
> 1 E Main St, Marshalltown, IA 50158
> P: 641-844-2804 / C: 641-351-9631
>=20
> ----- Original Message -----
> From: "Dave Weis" <djweis at internetsolver.com>
> To: "Central Iowa Linux Users Group" <cialug at cialug.org>
> Sent: Wednesday, September 8, 2010 8:29:52 AM
> Subject: Re: [Cialug] IPSec VPN not passing traffic
>=20
>=20
> >=20
> > Also, the traffic *is* getting from client to VPN server and being=20
> > decrypted, just not going anywhere on the internal network.
> >=20
>=20
> I missed part of this but does everything on the network know=20
> the routing to get to the vpn clients? If you traceroute from=20
> an unrelated machine to a VPN client, where does it stop?
>=20
> Dave
>=20
>=20
> --
> Dave Weis
> 515-224-9229
> djweis at internetsolver.com
> http://www.internetsolver.com/
> Please check out our Complete Support Service=20
> http://www.internetsolver.com/completesupport/=20
>=20
> =20
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
> _______________________________________________
> Cialug mailing list
> Cialug at cialug.org
> http://cialug.org/mailman/listinfo/cialug
> =