[Openswan Users] Routing problem with winxp and With Linksys WAG54G

sila sila at network-city.it
Tue Nov 22 18:19:38 CET 2005


i have this situations:

 Lan office <--->Linuxbox <------> internet <--> winxp road warrior
                          <----->    "      <-->linksys WAG54G <---> Lan Home

The windows xp client can ping any machines on the lan office, when i try to 
connect to lan office http service or netbios service the tunnel don't work.


For the linksys is = , lan office can view and Lan home and can use a netbios 
or http services.
Lan Home can' t use any services in lan office but ping some host non all 
host.

In this situations any firewall is disabled .

My configurations are :

version 2.0

config setup
   interfaces=%defaultroute
   forwardcontrol=no
   klipsdebug=none
   plutodebug=none
   nat_traversal=no

conn medimatica-winxp
     authby=secret
     disablearrivalcheck=no
     pfs=no
     left=81.174.16.70
     leftprotoport=17/1701
     right=%any
     rightprotoport=17/1701
     compress=yes
     auto=add

conn medimatica-linksys
     authby=secret
     pfs=yes
     left=81.174.16.70
     leftsubnet=192.168.0.0/24
     right=%any
     rightsubnet=192.168.1.0/24
     keyexchange=ike
     ikelifetime=240m
     keylife=60m
     compress=no
     auto=add

conn OEself
     auto=ignore

conn clear
     auto=ignore

conn private
     auto=ignore

conn private-or-clear
     auto=ignore

conn clear-or-private
     auto=ignore

conn block
     auto=ignore

conn packetdefault
     auto=ignore 
-----------------------------


: RSA	{

 RSA TABLE ( i don't use rsa,  i use for ipsec verify ok )

# do not change the indenting of that "}"
"fixed ip linux box" %any : PSK "lamiapresharedinchiaro"

------------------------------


[global]
listen-addr = fixed ip linux box
port = 1701

[lns default]
ip range = 192.168.0.253-192.168.0.254
local ip = fixed ip linux box
require chap = yes
refuse pap = yes
require authentication = yes
name = Medimatica-VPN
ppp debug = yes
pppoptfile = /etc/ppp/options.l2tpd
length bit = yes


------------------------------------

ipcp-accept-local
ipcp-accept-remote
ms-dns 192.168.0.105
ms-wins 192.168.0.130
auth
crtscts
idle 1800
nodefaultroute
mtu 1200
mru 1200
debug
lock
proxyarp
connect-delay 5000
nologfd


Please help me .





More information about the Users mailing list