[Gslug-general] New member, heavy pptp/routing question

[Ian Gallagher]

Glad to hear it! If you could elaborate on the solution for others to
see, that'd likely be useful as well. Was it just a masquerading
issue?


Thanks,
-Ian

On Fri, Sep 5, 2008 at 11:25 AM, Michael D. O'Brien <obrienmd at gmail.com> wrote:
> Just an FYI, if you see my reply post yesterday, I fixed it.  Simple
> iptables issue...  I'm a bit embarrassed.
>
> On Fri, Sep 5, 2008 at 9:39 AM, Robert Long <robert.long at hq.speakeasy.net>
> wrote:
>>
>> -----BEGIN PGP SIGNED MESSAGE-----
>> Hash: SHA1
>>
>> Fred Morris wrote:
>> > My guess is you don't have routing configured correctly, which is to say
>> > that
>> > the the local network clients don't know to choose the ppp1 interface
>> > (whatever its address is) as the "gateway" to the 192.168.0.0/16
>> > machines.
>> >
>>
>>
>> I kinda thought the same, but from how I read the original post I
>> thought the gateway on the local network is what is doing the PPTP, so
>> as long as the local clients have their default GW pointed to that, the
>> GW should figure it out as it has a directly connected route to the
>> remote network.
>>
>>
>> What could be happening, and what I wasn't able to determine from the
>> original description, is on the remote end where the tunnel is
>> terminated.  Hosts there will also need a route back to the local
>> network, so that might be the place to start looking.
>>
>>
>> If you're not using the default GW on the remote network for this, you'd
>> need to add either A) routes on the remote hosts to point to the GW to
>> the local network  - or - B) a route on the remote default GW pointing
>> to the 'local' network via whatever machine is setup as the PPTP end
>> point and allow for ICMP-Redirects (enabled by default).  Also make sure
>> that the remote PPTP system has forwarding enabled.
>>
>>
>> .r'
>> -----BEGIN PGP SIGNATURE-----
>> Version: GnuPG v2.0.9 (GNU/Linux)
>> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org
>>
>> iEYEARECAAYFAkjBYLoACgkQmcorKWFVwQDm8gCgmD5fVm5RufQCegilyCF4c+Hb
>> PFIAoJGsKPKI0BwajDYfEeoaLtZsfAdA
>> =OQ6A
>> -----END PGP SIGNATURE-----
>> _______________________________________________
>> Gslug-general mailing list
>> Gslug-general at gslug.org
>> http://lists.gslug.org/mailman/listinfo/gslug-general
>
>
>
> --
> Michael O'Brien
> 253-217-7129
>
> _______________________________________________
> Gslug-general mailing list
> Gslug-general at gslug.org
> http://lists.gslug.org/mailman/listinfo/gslug-general
>