[Openswan Users] Samba not working over IPsec

[Philip Pemberton]

Hi,
  I've managed to get my VPN to behave itself (after switching to another VPN
client). I've also managed to get Samba to work cross-subnet for browsing.
The problem is, although I can see all the machines and shares on the
network, it takes around five minutes for the laptop to open a share on any
machine on the 10.0.0.0/16 subnet. Once a share has been opened, access to
the 10.0.0.0/16 subnet becomes pretty quick.
  Anything on the 10.1.x.x subnet (VPN) is fine, and opens pretty quickly.

Settings are:
  eth0:   100BaseT Ethernet: 10.0.0.0/16
  eth1:   Wireless AP:       10.1.0.0/16
  ipsec0: IPSec for eth1:    10.1.0.0/16

Laptop:
  Win98SE, Netgear ProSafe client, IP addr 10.1.0.16, netmask 255.255.0.0.
  ORiNOCO Wireless card, DHCP config'd.
  VPN software set to "Forward Any" (IP 0.0.0.0/0).

Desktop:
  Win2k, no VPN software. IP addr 10.0.0.8 netmask 255.255.0.0

Server:
  Linux, 2.6.10 kernel, Openswan 2.4.4, KLIPS, IP 10.0.0.1 on eth0 and
  10.1.0.1 on eth1, netmask 255.255.0.0 (same for both IPs)

Has anyone seen this happen before?

Thanks.
-- 
Phil.                              | Acorn RiscPC600 SA220 64MB+6GB 100baseT
philpem at philpem.me.uk              | Athlon64 3200+ A8VDeluxe R2 512MB+100GB
http://www.philpem.me.uk/          | Panasonic CF-25 Mk.2 Toughbook
... This tagline is freeware, no payment should be made for its distribution.