Frees/wan setup problems

[Kenneth E. Lussier]

On Fri, 2003-02-28 at 09:50, Cole Tuininga wrote:
> On Fri, 2003-02-28 at 09:41, Kenneth E. Lussier wrote:
> > On one (or both) of the gateway's themselves, try doing a 'traceroute -i
> > ethX' where X is the internal (protected) interface of the gateway  to
> > the internal interface of the other gateway (i.e. traceroute -i eth0
> > 192.168.1.1).
> 
> This appears to work.  Note that I took out the tunnels excepting the
> subnet to subnet one.  With the other ones in place, I couldn't connect
> to the remote gateway at all (including over the regular net).

So, with the original setup with just the default conn and the
panam-cole-ss, gateway to gateway works. That's good. Does it work from
both sides?  That would narrow it down to a routing problem. If you run
'tcpdump -n -i any' on both gateways (at the same time) and do a
traceroute from a machine on the subnet to the private ip address of the
opposite gateway, do you see anything going out and coming back? Then
try tracrouting to a machine on the other subnet. 

Thanks,
Kenny
  
-- 
----------------------------------------------------------------------------
"Tact is just *not* saying true stuff" -- Cordelia Chase

Kenneth E. Lussier
Sr. Systems Administrator
Zuken, USA
PGP KeyID CB254DD0 
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xCB254DD0