[Vpn-help] Routing problem
Matthew Butt
Matthew.Butt at tricycleinc.com
Tue Nov 10 07:50:42 CST 2009
OK, I'll start again. Apologies for not giving the right information previously, and thanks for your patience.
I'm running Shrew 2.1.5-rc4 on Win 7 x64 Ultimate running on a VMWare ESX4i machine, however I have experienced the same issue running on a Dell Inspiron 9400 in 64 bit.
When I connect to our client's Cisco system using Shrew, I can't connect to anything on the end of the VPN tunnel. The tunnel comes up fine without error and appears to stay up until I disconnect.
Below are the outputs of ROUTE PRINT before and after connection, along with the trace output from a ping command trying to access an IP at the end of the tunnel (I know this IP pings because I can do so if I use the normal Cisco VPN client on 32 bit). As you can see, the VPN connection gives me an IP of 10.5.1.60. My internal LAN IP is 10.0.10.93. The VPN profile was created by importing a working PCF file.
C:\Users\MattTest>route print
===========================================================================
Interface List
11...00 0c 29 66 f5 75 ......Intel(R) PRO/1000 MT Network Connection
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.10.254 10.0.10.93 10
10.0.10.0 255.255.255.0 On-link 10.0.10.93 266
10.0.10.93 255.255.255.255 On-link 10.0.10.93 266
10.0.10.255 255.255.255.255 On-link 10.0.10.93 266
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.0.10.93 266
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.0.10.93 366
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
11 266 fe80::/64 On-link
11 266 fe80::24cb:495a:f993:adec/128
On-link
1 306 ff00::/8 On-link
11 266 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\MattTest>route print
===========================================================================
Interface List
22...aa aa aa aa aa 00 ......Shrew Soft Virtual Adapter
11...00 0c 29 66 f5 75 ......Intel(R) PRO/1000 MT Network Connection
1...........................Software Loopback Interface 1
12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
26...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.10.254 10.0.10.93 10
10.0.10.0 255.255.255.0 On-link 10.0.10.93 266
10.0.10.93 255.255.255.255 On-link 10.0.10.93 266
10.0.10.255 255.255.255.255 On-link 10.0.10.93 266
10.2.0.0 255.255.0.0 On-link 10.5.1.60 31
10.2.255.255 255.255.255.255 On-link 10.5.1.60 286
10.5.1.0 255.255.255.0 On-link 10.5.1.60 286
10.5.1.60 255.255.255.255 On-link 10.5.1.60 286
10.5.1.255 255.255.255.255 On-link 10.5.1.60 286
10.8.0.0 255.255.0.0 On-link 10.5.1.60 31
10.8.255.255 255.255.255.255 On-link 10.5.1.60 286
10.9.0.0 255.255.0.0 On-link 10.5.1.60 31
10.9.255.255 255.255.255.255 On-link 10.5.1.60 286
10.248.240.0 255.255.255.0 On-link 10.5.1.60 31
10.248.240.255 255.255.255.255 On-link 10.5.1.60 286
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
169.146.0.0 255.255.0.0 On-link 10.5.1.60 31
169.146.255.255 255.255.255.255 On-link 10.5.1.60 286
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.0.10.93 266
224.0.0.0 240.0.0.0 On-link 10.5.1.60 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.0.10.93 366
255.255.255.255 255.255.255.255 On-link 10.5.1.60 286
===========================================================================
Persistent Routes:
None
IPv6 Route Table
===========================================================================
Active Routes:
If Metric Network Destination Gateway
1 306 ::1/128 On-link
11 266 fe80::/64 On-link
22 286 fe80::/64 On-link
11 266 fe80::24cb:495a:f993:adec/128
On-link
22 286 fe80::a5d2:8e14:e652:1881/128
On-link
1 306 ff00::/8 On-link
11 266 ff00::/8 On-link
22 286 ff00::/8 On-link
===========================================================================
Persistent Routes:
None
C:\Users\MattTest>ping 10.2.1.95
Pinging 10.2.1.95 with 32 bytes of data:
Reply from 10.5.1.60: Destination host unreachable.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 10.2.1.95:
Packets: Sent = 4, Received = 1, Lost = 3 (75% loss),
Any guidance would be greatly appreciated.
Many thanks,
Matt
-----Original Message-----
From: vpn-help-bounces at lists.shrew.net [mailto:vpn-help-bounces at lists.shrew.net] On Behalf Of Stefan Bauer
Sent: Friday, November 06, 2009 8:49 AM
To: 'vpn-help at lists.shrew.net'
Subject: Re: [Vpn-help] Routing problem
Matthew Butt wrote:
>> Pinging aa.bb.cc.dd with 32 bytes of data:
Please dont obfuscate the ip addresses here.
>> Reply from 10.5.1.31: Destination host unreachable.
What is 10.5.1.31? It's not mentioned in your route output.
Please provide more information of your network. So far i dont see
the complete picture.
--
Stefan Bauer -----------------------------------------
PGP: E80A 50D5 2D46 341C A887 F05D 5C81 5858 DCEF 8C34
-------- plzk.de - Linux - because it works ----------
_______________________________________________
vpn-help mailing list
vpn-help at lists.shrew.net
http://lists.shrew.net/mailman/listinfo/vpn-help
More information about the vpn-help
mailing list