No subject

This is interesting - L.C.98.24 also thinks it is 10.0.0.1 when IPsec is up

traceroute 10.0.0.1
traceroute to 10.0.0.1 (10.0.0.1), 30 hops max, 40 byte packets
 1  10.0.0.1 (10.0.0.1)  1.635 ms  2.299 ms  2.294 ms


route
Kernel IP routing table
Destination     Gateway         Genmask         Use Iface
5.44.98.0       *               255.255.255.0   eth1
10.0.0.0        *               255.255.255.0   eth1
192.168.99.0    *               255.255.255.0   eth0
default         5.44.98.1       0.0.0.0         eth1


----------------------------------------------------

FROM 10.0.0.1

ping 192.168.99.1
PING 192.168.99.1 (192.168.99.1) 56(84) bytes of data.
64 bytes from 192.168.99.1: icmp_seq=1 ttl=63 time=53.2 ms


traceroute 192.168.99.1
traceroute to 192.168.99.1 (192.168.99.1), 30 hops max, 40 byte packets
 1  pc-00251.impamark.co.uk (10.0.0.251)  0.414 ms  0.416 ms  0.413 ms
 2  192.168.99.1 (192.168.99.1)  53.438 ms  57.097 ms  60.522 ms

FROM 10.0.0.1 I can ssh to 192.168.99.1

FROM 192.168.99.1 I cannot ssh to 10.0.0.1


Hope that helps - let me know if I can provide more information.

B. Rgds
John