[Vpn-help] Established VPN connection but no internet anymore

Matthew Grooms mgrooms at shrew.net
Fri Nov 6 10:09:02 CST 2009


Kai Wetzelsberger wrote:
> Hi Stefan,
> 
> I made the changes you have told me. Now my route table 
> with vpn connection looks like:
> 
> Ziel            Router          Genmask         Flags 
> Metric Ref    Use Iface
> 141.19.7.253    192.168.178.1   255.255.255.255 UGH   0 
>      0        0 wlan0
> 192.168.178.0   0.0.0.0         255.255.255.0   U     2 
>      0        0 wlan0
> 141.19.173.0    141.19.173.43   255.255.255.0   UG    0 
>      0        0 tap0
> 169.254.0.0     0.0.0.0         255.255.0.0     U     1000 
>   0        0 wlan0
> 0.0.0.0         192.168.178.1   0.0.0.0         UG    0 
>      0        0 wlan0
> 
> 141.19.173.43 is the received vpn ip (tap0)
> VPN Remote Host: 141.19.7.253
> Router IP: 192.168.178.1
> Wlan0 IP: 192.168.178.37
> 
> Internet works with big latency but vpn sites behind the 
> tunnel are not accessible... Something must still be 
> wrong... Do you have an idea?
> 

Hi Kai,

If you don't add specific include networks to the policy tab in your 
site configuration, all traffic will be forced across the network by 
default. With some gateways ( cisco/sidewinder/ipsec-tools/netgear ), 
they can 'tell' the client this information automatically. However, if 
you are connecting to a gateway that can't ( or isn't configured to ) 
supply the remote network list, you will need to specify it manually.

Without knowing the topology behind the vpn gateway, the vpn client has 
no way to determine which packets should be tunneled and which packets 
should be passed to your local default gateway.

-Matthew



More information about the vpn-help mailing list