[Vpn-help] Routing problem

Matthew Butt Matthew.Butt at tricycleinc.com
Tue Nov 10 07:50:42 CST 2009


OK, I'll start again.  Apologies for not giving the right information previously, and thanks for your patience.

I'm running Shrew 2.1.5-rc4 on Win 7 x64 Ultimate running on a VMWare ESX4i machine, however I have experienced the same issue running on a Dell Inspiron 9400 in 64 bit.

When I connect to our client's Cisco system using Shrew, I can't connect to anything on the end of the VPN tunnel.  The tunnel comes up fine without error and appears to stay up until I disconnect.

Below are the outputs of ROUTE PRINT before and after connection, along with the trace output from a ping command trying to access an IP at the end of the tunnel (I know this IP pings because I can do so if I use the normal Cisco VPN client on 32 bit).  As you can see, the VPN connection gives me an IP of 10.5.1.60.  My internal LAN IP is 10.0.10.93.  The VPN profile was created by importing a working PCF file.


C:\Users\MattTest>route print
===========================================================================
Interface List
 11...00 0c 29 66 f5 75 ......Intel(R) PRO/1000 MT Network Connection
  1...........................Software Loopback Interface 1
 12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      10.0.10.254       10.0.10.93     10
        10.0.10.0    255.255.255.0         On-link        10.0.10.93    266
       10.0.10.93  255.255.255.255         On-link        10.0.10.93    266
      10.0.10.255  255.255.255.255         On-link        10.0.10.93    266
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link        10.0.10.93    266
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link        10.0.10.93    366
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 11    266 fe80::/64                On-link
 11    266 fe80::24cb:495a:f993:adec/128
                                    On-link
  1    306 ff00::/8                 On-link
 11    266 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

C:\Users\MattTest>route print
===========================================================================
Interface List
 22...aa aa aa aa aa 00 ......Shrew Soft Virtual Adapter
 11...00 0c 29 66 f5 75 ......Intel(R) PRO/1000 MT Network Connection
  1...........................Software Loopback Interface 1
 12...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter
 26...00 00 00 00 00 00 00 e0 Microsoft ISATAP Adapter #2
===========================================================================

IPv4 Route Table
===========================================================================
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
          0.0.0.0          0.0.0.0      10.0.10.254       10.0.10.93     10
        10.0.10.0    255.255.255.0         On-link        10.0.10.93    266
       10.0.10.93  255.255.255.255         On-link        10.0.10.93    266
      10.0.10.255  255.255.255.255         On-link        10.0.10.93    266
         10.2.0.0      255.255.0.0         On-link         10.5.1.60     31
     10.2.255.255  255.255.255.255         On-link         10.5.1.60    286
         10.5.1.0    255.255.255.0         On-link         10.5.1.60    286
        10.5.1.60  255.255.255.255         On-link         10.5.1.60    286
       10.5.1.255  255.255.255.255         On-link         10.5.1.60    286
         10.8.0.0      255.255.0.0         On-link         10.5.1.60     31
     10.8.255.255  255.255.255.255         On-link         10.5.1.60    286
         10.9.0.0      255.255.0.0         On-link         10.5.1.60     31
     10.9.255.255  255.255.255.255         On-link         10.5.1.60    286
     10.248.240.0    255.255.255.0         On-link         10.5.1.60     31
   10.248.240.255  255.255.255.255         On-link         10.5.1.60    286
        127.0.0.0        255.0.0.0         On-link         127.0.0.1    306
        127.0.0.1  255.255.255.255         On-link         127.0.0.1    306
  127.255.255.255  255.255.255.255         On-link         127.0.0.1    306
      169.146.0.0      255.255.0.0         On-link         10.5.1.60     31
  169.146.255.255  255.255.255.255         On-link         10.5.1.60    286
        224.0.0.0        240.0.0.0         On-link         127.0.0.1    306
        224.0.0.0        240.0.0.0         On-link        10.0.10.93    266
        224.0.0.0        240.0.0.0         On-link         10.5.1.60    286
  255.255.255.255  255.255.255.255         On-link         127.0.0.1    306
  255.255.255.255  255.255.255.255         On-link        10.0.10.93    366
  255.255.255.255  255.255.255.255         On-link         10.5.1.60    286
===========================================================================
Persistent Routes:
  None

IPv6 Route Table
===========================================================================
Active Routes:
 If Metric Network Destination      Gateway
  1    306 ::1/128                  On-link
 11    266 fe80::/64                On-link
 22    286 fe80::/64                On-link
 11    266 fe80::24cb:495a:f993:adec/128
                                    On-link
 22    286 fe80::a5d2:8e14:e652:1881/128
                                    On-link
  1    306 ff00::/8                 On-link
 11    266 ff00::/8                 On-link
 22    286 ff00::/8                 On-link
===========================================================================
Persistent Routes:
  None

C:\Users\MattTest>ping 10.2.1.95

Pinging 10.2.1.95 with 32 bytes of data:
Reply from 10.5.1.60: Destination host unreachable.
Request timed out.
Request timed out.
Request timed out.

Ping statistics for 10.2.1.95:
    Packets: Sent = 4, Received = 1, Lost = 3 (75% loss),




Any guidance would be greatly appreciated.

Many thanks,

Matt


-----Original Message-----
From: vpn-help-bounces at lists.shrew.net [mailto:vpn-help-bounces at lists.shrew.net] On Behalf Of Stefan Bauer
Sent: Friday, November 06, 2009 8:49 AM
To: 'vpn-help at lists.shrew.net'
Subject: Re: [Vpn-help] Routing problem

Matthew Butt wrote:
>> Pinging aa.bb.cc.dd with 32 bytes of data:

Please dont obfuscate the ip addresses here.

>> Reply from 10.5.1.31: Destination host unreachable.

What is 10.5.1.31? It's not mentioned in your route output.
Please provide more information of your network. So far i dont see
the complete picture.

-- 
Stefan Bauer -----------------------------------------
PGP: E80A 50D5 2D46 341C A887 F05D 5C81 5858 DCEF 8C34
-------- plzk.de - Linux - because it works ----------
_______________________________________________
vpn-help mailing list
vpn-help at lists.shrew.net
http://lists.shrew.net/mailman/listinfo/vpn-help



More information about the vpn-help mailing list