<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>RE: [vpn-help] Linux clients connect, no traffic passes.</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>I had not. I've been searching for just this sort of thing for a week now.<BR>
<BR>
I'll try it out and update if it fails to work, but I think this is it. Thanks!<BR>
<BR>
<BR>
-----Original Message-----<BR>
From: Matthew Grooms [<A HREF="mailto:mgrooms">mailto:mgrooms</A> at shrew.net]<BR>
Sent: Tue 2/9/2010 12:43 AM<BR>
To: Jason Norman<BR>
Cc: vpn-help at lists.shrew.net<BR>
Subject: Re: [vpn-help] Linux clients connect, no traffic passes.<BR>
<BR>
On 2/6/2010 12:45 PM, Jason Norman wrote:<BR>
> Using a few different releases of Ubuntu (some 8.x and some 9.x and a<BR>
> couple of 9.10), and three different versions of the Shrew Sift client<BR>
> (2.1.5, 2.1.6 beta, and 2.2 alpha), I get the following behavior<BR>
> connecting to a Juniper SSG-350:<BR>
><BR>
> Tunnel connects and is established, but no traffic passes over the<BR>
> interfaces. No internet traffic, no VPN traffic, nothing.<BR>
><BR>
> Running tcpdump on both eth0 (or ath0 depending) tap0 shows zero packets.<BR>
><BR>
> The config file being used works on Windows ShrewSoft 2.1.5 clients, and<BR>
> was exported from a working windows system. I've also tried re-creating<BR>
> the config by hand. Parameters are pretty basic, and identical<BR>
> parameters work on the windows clients using 2.1.5. As a data point, Mac<BR>
> systems connecting with IPSecuritas connect using the same parameters.<BR>
> My Linux users are the only folks unable to connect.<BR>
><BR>
> I've noticed the windows clients have some extra options vs the linux<BR>
> systems. We may be relying on an option in the windows clients that<BR>
> isn't available on the linux systems....<BR>
><BR>
> Just curious what we might be missing? I can post debug logs (sanitized)<BR>
> or a config (also sanitized) as needed.<BR>
><BR>
<BR>
Have you read this post?<BR>
<BR>
<A HREF="http://lists.shrew.net/mailman/htdig/vpn-help/2008-November/001827.html">http://lists.shrew.net/mailman/htdig/vpn-help/2008-November/001827.html</A><BR>
<BR>
-Matthew<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>