I'm trying to set up mpd as a pptp client to a remote server.
It authenticates right and setts up the tunnel, but it doesn't quite
work.
I narrowed the problem to sone nasty routing problem, because the pptp
server's IP, as defined in mpd.links is the same as the remote ip
of the ng1 interface.
In detail:
my client: dynamic IP given my my ISP.
pptp server: a.b.c.d
once I run mpd, I get the following:
ng1: flags=88d1<UP,POINTOPOINT,RUNNING,NOARP,SIMPLEX,MULTICAST> mtu 1458
inet a.b.e.f --> a.b.c.d netmask 0xffffffff
inet6 fe80::250:daff:fe76:62e5%ng1 prefixlen 64 scopeid 0x9
as you see, the pptp server's ip is the same as the remote ptp one.
After that, the box tries to route all traffic to a.b.c.d via ng1 including
the gre packets and the ones before encapsulation.
here's a tcpdump snippet of what happens:
bash-2.05b# tcpdump -nli ng1
tcpdump: listening on ng1
12:22:59.027790 external > a.b.c.d: gre [KAv1] ID:d03c A:15 [|gre]
12:23:02.587838 external > a.b.c.d: gre [KAv1] ID:d03c A:16 [|gre]
12:23:02.820064 a.b.e.f > a.b.c.d: icmp: echo request
12:23:03.827900 a.b.e.f > a.b.c.d: icmp: echo request
12:23:04.837908 a.b.e.f > a.b.c.d: icmp: echo request
12:23:05.137864 external > a.b.c.d: gre [KAv1] ID:d03c A:17 [|gre]
12:23:05.847928 a.b.e.f > a.b.c.d: icmp: echo request
12:23:06.857961 a.b.e.f > a.b.c.d: icmp: echo request
12:23:07.867965 a.b.e.f > a.b.c.d: icmp: echo request
12:23:08.027909 external > a.b.c.d: gre [KAv1] ID:d03c A:18 [|gre]
12:23:08.877974 a.b.e.f > a.b.c.d: icmp: echo request
12:23:09.887987 a.b.e.f > a.b.c.d: icmp: echo request
The icmp are fine, but the gre packets shouldn't be there.
It seems to me I should delete the actual route to a.b.c.d and replace
it with a route via my actual default gateway. That way, all packets to
the remote peer would go out via xl0 (external interface) and no via
ng1 (the tunnel), but I'm not sure about how I can do it.
Thanks in advance.
Fer
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
