Here's my current network configuration in a lousy asci drawing.
WAN LAN LAN WAN WAN LAN
____ ____ IPsec ____
DHCP | | | | wireless | |
intenet--| |------------| |_______________| |___
| | | | | |
---- ---- ----
192.168.1.254 172.16.1.1 192.168.3.254
192.168.1.1 172.16.1.2
Internet connected server has a configuration like this.
Internet Gateway
WAN: DHCP
LAN: 192.168.1.254/24
$ netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 192.168.0.1 UGSc 1 8287 sis0
127.0.0.1 127.0.0.1 UH 1 16 lo0
192.168.0 link#1 UC 1 0 sis0
192.168.0.59 127.0.0.1 UGHS 0 0 lo0
192.168.1 link#2 UC 3 0 sis1
192.168.3 192.168.1.1 UGSc 0 14 sis1
Wireless gateway:
Wan: 172.16.1.1 gw 192.168.1.254
Lan: 192.168.1.1
IPsec: LAN to 192.168.3.0/24 gw 172.16.1.2
$ netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 192.168.1.254 UGSc 1 1 sis0
127.0.0.1 127.0.0.1 UH 0 0 lo0
172.16.1/30 link#1 UC 1 0 wi0
192.168.1 link#2 UC 4 0 sis0
192.168.3 192.168.1.1 UGSc 0 0 sis0
Wireless node:
Wan 172.16.1.2/30 Gateway 192.168.3.254
LAN 192.168.3.254
IPsec:
LAN to 192.168.1.0/24 gw 172.16.1.1/30
$ netstat -rn
Routing tables
Internet:
Destination Gateway Flags Refs Use Netif Expire
default 192.168.3.254 UGSc 0 1 sis0
127.0.0.1 127.0.0.1 UH 0 0 lo0
172.16.1/30 link#1 UC 1 0 wi0
192.168.1 192.168.3.254 UGSc 1 11 sis0
192.168.3 link#2 UC 2 0 sis0
The ipsec tunnel works fine. I can ping from one machine on each end to
the other, through it. I can ping 192.168.1.254 from either end of the
tunnel. What I cannot seem to be able to do is route traffic from
192.168.1.1 to 192.168.1.254 in either direction. I'm not a BSD guy but
I've done networking with Linux for years. I have to admit this has me
baffled.
Am I missing something obvious? Does setting the default route on the WAN
interface to the network on the LAN for the wireless gateway somehow
confuse things? These are all soekris boxes with m0n0wall, so I'm limited
with the diagnostics I can use.
--
Neil Schneider pacneil_at_linuxgeek_dot_net
http://www.paccomp.com
Key fingerprint = 67F0 E493 FCC0 0A8C 769B 8209 32D7 1DB1 8460 C47D
Clothes make the man. Naked people have little or no influence on society.
-- Mark Twain | 