<div>Paul,</div><div><br></div>Thanks again for your continued conversation in troubleshooting this. Unfortunately we have all of those bases covered. If the tunnel is actually created between Amazon and the client, should I see a new interface within ifconfig? If there's nothing new created, does that narrow down where the problem could lie? Or does it just go through eth0 with everything else?<div>
<br></div><div>Cheers,</div><div>-James<br><br><div class="gmail_quote">On Mon, Sep 26, 2011 at 12:27 PM, Paul Wouters <span dir="ltr"><<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div class="im">On Sun, 25 Sep 2011, James Nelson wrote:<br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
My netstat isn't showing anything from 500 or 4500- should it?<br>
</blockquote>
<br></div>
On UDP yes, not on TCP.<div class="im"><br>
<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
ACCEPT udp -- anywhere anywhere udp spt:4500<br>
dpt:4500<br>
</blockquote>
<br></div>
This does not cover the fact that the client might be behind NAT, so the<br>
port moves from 4500 to whatever the NAT router picks. You need to allow<br>
4500 <-> randomg high ports<br><font color="#888888">
<br>
Paul</font></blockquote></div>
</div>