[vpn-help] Linux clients connect, no traffic passes.

Jason Norman jnorman at ticom-geo.com
Tue Feb 9 07:01:08 CST 2010


I had not. I've been searching for just this sort of thing for a week now.

I'll try it out and update if it fails to work, but I think this is it. Thanks!


-----Original Message-----
From: Matthew Grooms [mailto:mgrooms at shrew.net]
Sent: Tue 2/9/2010 12:43 AM
To: Jason Norman
Cc: vpn-help at lists.shrew.net
Subject: Re: [vpn-help] Linux clients connect, no traffic passes.
 
On 2/6/2010 12:45 PM, Jason Norman wrote:
> Using a few different releases of Ubuntu (some 8.x and some 9.x and a
> couple of 9.10), and three different versions of the Shrew Sift client
> (2.1.5, 2.1.6 beta, and 2.2 alpha), I get the following behavior
> connecting to a Juniper SSG-350:
>
> Tunnel connects and is established, but no traffic passes over the
> interfaces. No internet traffic, no VPN traffic, nothing.
>
> Running tcpdump on both eth0 (or ath0 depending) tap0 shows zero packets.
>
> The config file being used works on Windows ShrewSoft 2.1.5 clients, and
> was exported from a working windows system. I've also tried re-creating
> the config by hand. Parameters are pretty basic, and identical
> parameters work on the windows clients using 2.1.5. As a data point, Mac
> systems connecting with IPSecuritas connect using the same parameters.
> My Linux users are the only folks unable to connect.
>
> I've noticed the windows clients have some extra options vs the linux
> systems. We may be relying on an option in the windows clients that
> isn't available on the linux systems....
>
> Just curious what we might be missing? I can post debug logs (sanitized)
> or a config (also sanitized) as needed.
>

Have you read this post?

http://lists.shrew.net/mailman/htdig/vpn-help/2008-November/001827.html

-Matthew

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.shrew.net/pipermail/vpn-help/attachments/20100209/5872fcaf/attachment-0002.html>


More information about the vpn-help mailing list