Re: kern/122065: [gre] gre over ipsec not working



The following reply was made to PR kern/122065; it has been noted by GNATS.

From: "Bjoern A. Zeeb" <bz@xxxxxxxxxxx>
To: bug-followup@xxxxxxxxxxx, alephis@xxxxxxxxx
Cc:
Subject: Re: kern/122065: [gre] gre over ipsec not working
Date: Tue, 25 Mar 2008 20:45:18 +0000 (UTC)

Hi,

the report is not too specific. Could you provide more details like
- policies on Windows
- confirm with tcpdump that no packets are going out on the real
interface?
- can you still see the packets on enc0?
- any possible firewall setups?
- ...

In case you do not want to share all that in public you can mail me
directly thought with "private IPs" this shouldn't be a problem.

--
Bjoern A. Zeeb bzeeb at Zabbadoz dot NeT
Software is harder than hardware so better get it right the first time.
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"



Relevant Pages

  • Re: kern/122065: [gre] gre over ipsec not working
    ... Subject: kern/122065: [gre] gre over ipsec not working ... I've got only esp packets, currently can't make tcpdump work with -E ...
    (freebsd-net)
  • Re: Error 720 connecting to server via VPN
    ... By default the router's firewall is configured to drop ICMP packets ... Select WAN Setup> Advanced> Respond to Ping on Internet Port. ... server and the Internet allow GRE packets. ... routers on the user's network are also configured to allow GRE packets. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN Problem Ereignis 20209
    ... Pruefe doch mal deine Firewall, ob die Generic Routing Encapsulation (GRE) ... packets blockt. ... A connection between the VPN server and the VPN client has been ...
    (microsoft.public.de.german.windows.server.networking)
  • Re: VPN between Concentrator & Router
    ... One problem with redistribution is that your administrative distance is ... I actually recommend a slightly more complex solution using GRE ... Since IPSec tunnels don't support any routing protocols ...
    (comp.dcom.sys.cisco)
  • Re: VPN between Concentrator & Router
    ... I actually recommend a slightly more complex solution using GRE ... Since IPSec tunnels don't support any routing protocols ... does pass through the IPSec tunnel. ...
    (comp.dcom.sys.cisco)