Koozali.org: home of the SME Server

Multiple VPN tunnels

Offline Neririn

  • ****
  • 100
  • +0/-0
Multiple VPN tunnels
« on: November 24, 2004, 08:23:40 PM »
I have three SME boxes placed in my 3 offices.  

I have had a VPN/PPTP tunnel between two of them for some time without a hitch.  

This past week I added a third server, and subsequent tunnels to and from the other offices.  Now the only problem is, the third office can ping the first two offices just fine, and the first two offices can still ping/contact each other, but the original two offices cant see the third office.

Hows that for a word problem?  Has anyone had success failure in getting this type of network up and running?
......

guest22

Multiple VPN tunnels
« Reply #1 on: November 25, 2004, 09:45:38 PM »
Hi,

What does 'route' tell you on every box?

RequestedDeletion

Offline Neririn

  • ****
  • 100
  • +0/-0
Multiple VPN tunnels
« Reply #2 on: November 26, 2004, 04:19:26 AM »
It tells me it is trying to go out eth0 rather than ipsec0 how do I change that?  Have I configured something improperly via the server-manager?

Thanks so much for your help.
......

guest22

Multiple VPN tunnels
« Reply #3 on: November 26, 2004, 06:56:23 AM »
What did you change in server manager regarding the remote sites? and what how-to did you follow?

Offline Neririn

  • ****
  • 100
  • +0/-0
here are the RPM's I used
« Reply #4 on: November 26, 2004, 06:14:50 PM »
I used the RPM's found on this howto, but the only way I have been able to get the tunnels to work has been to set both sides to server with no clients.  If I just modify the kernel routes using route, will they stick and survive a reboot?  or are all routes defined by a template somewhere.  Basically the routes are all there as needed, just some are set to use the wrong interface to reach the gateway.

The only things I modified in the server manager was to set up the VPN tunnels via the new VirtualRemeoteNetworks page.


I wondered if it was a 5.6 to 6.0.1-01 problem, but the third box is a 6.0.1-01 box and it works flawlessly.



http://www.ibiblio.org/pub/Linux/distributions/smeserver/contribs/saco/contrib/devinfo-freeswan-1.99/freeswan-howto.html
......

guest22

Multiple VPN tunnels
« Reply #5 on: November 27, 2004, 09:48:06 AM »
Yes, almost every script is templated, so take a look at the new (or custom) templates of the networking/interfaces scripts.

Offline Neririn

  • ****
  • 100
  • +0/-0
Cant find any custom templates in /etc/sysconfig/network-scr
« Reply #6 on: November 27, 2004, 09:26:29 PM »
There does not appear to be any cusom scripts for the interfaces.


Where would these scripts be?  there are several /ipsec.conf custom templates, but they 'appear' to be right
......