LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 07-30-2008, 07:35 AM   #1
vkmgeek
Member
 
Registered: Feb 2006
Location: Ahmedabad
Distribution: rhel5
Posts: 185
Blog Entries: 2

Rep: Reputation: 31
VPN route


Hi all,
I am using VPN connection to get into another LAN which is 12000 miles away. Quite obvious.

Now, that far LAN uses its IP address schemes like 192.168.54.xx, 192.168.55.xx, 192.168.56.xx, 192.168.57.xx, 192.168.58.xx, 192.168.59.xx .
When I start my Cisco VPN client. I am able to ping 192.168.54.xx, 192.168.55.xx, 192.168.56.xx BUT I am not able to ping 192.168.57.xx, 192.168.58.xx, 192.168.59.xx.

So, what I am doing is first of all I log into some machine sa 192.168.54.3 and then from there 192.168.58.1. And I can do it quite successfully.
Now, logically I should be able to do it DIRECTLY as well. Since sometimes if 192.168.54.3 goes down, I am like screwed up.

But, I am not sure how to do this. What I tried is like adding route manually to Routing Table. But It dint help.

Few commands output... It may help understanding prob better.
[root@Viral ~]# route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
204.57.xx.xx 192.168.6.1 255.255.255.255 UGH 0 0 0 eth0
192.168.54.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.55.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.52.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.53.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.50.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.51.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.1.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.12.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.10.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.40.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.56.0 192.168.7.58 255.255.255.0 UG 0 0 0 cipsec0
192.168.0.0 0.0.0.0 255.255.240.0 U 0 0 0 eth0
169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 eth0
192.168.0.0 0.0.0.0 255.255.0.0 U 0 0 0 cipsec0
0.0.0.0 192.168.6.1 0.0.0.0 UG 0 0 0 eth0
[root@Viral ~]# ifconfig
cipsec0 Link encap:Ethernet HWaddr 00:0B:FC:F8:01:8F
inet addr:192.168.7.58 Mask:255.255.0.0
inet6 addr: fe80::20b:fcff:fef8:18f/64 Scope:Link
UP RUNNING NOARP MTU:1356 Metric:1
RX packets:149693 errors:0 dropped:443 overruns:0 frame:0
TX packets:108159 errors:0 dropped:674 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:156329456 (149.0 MiB) TX bytes:8675439 (8.2 MiB)

eth0 Link encap:Ethernet HWaddr 00:11:11:09:CC:FE
inet addr:192.168.14.27 Bcast:192.168.255.255 Mask:255.255.240.0
inet6 addr: fe80::211:11ff:fe09:ccfe/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:2004214 errors:0 dropped:0 overruns:0 frame:0
TX packets:326959 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:573667116 (547.0 MiB) TX bytes:81261820 (77.4 MiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:16436 Metric:1
RX packets:5952 errors:0 dropped:0 overruns:0 frame:0
TX packets:5952 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:5199001 (4.9 MiB) TX bytes:5199001 (4.9 MiB)

[root@Viral ~]#


Please help. . .
 
Old 07-31-2008, 01:54 AM   #2
datopdog
Member
 
Registered: Feb 2008
Location: JHB South Africa
Distribution: Centos, Kubuntu, Cross LFS, OpenSolaris
Posts: 806

Rep: Reputation: 41
As you can see the vpn concentrator is not pushing routes for 192.168.57.xx, 192.168.58.xx, 192.168.59.xx. The best fix would be to get the concentrator to do that.
 
Old 07-31-2008, 02:02 AM   #3
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 59
Can you not aggregate your 10 routes into 5 ? I see you using .50 to .59

$ cidr 192.168.50.0 192.168.59.0
192.168.50.0/23
192.168.52.0/22
192.168.56.0/23
192.168.58.0/24
192.168.59.0/32

Perhaps this will avoid some internal limit.
 
Old 08-01-2008, 01:42 AM   #4
vkmgeek
Member
 
Registered: Feb 2006
Location: Ahmedabad
Distribution: rhel5
Posts: 185
Blog Entries: 2

Original Poster
Rep: Reputation: 31
Quote:
Originally Posted by datopdog View Post
As you can see the vpn concentrator is not pushing routes for 192.168.57.xx, 192.168.58.xx, 192.168.59.xx. The best fix would be to get the concentrator to do that.
I do not have access to VPN concentrator. Only I can do is some changes on my VPN client machine.
 
Old 08-01-2008, 01:43 AM   #5
vkmgeek
Member
 
Registered: Feb 2006
Location: Ahmedabad
Distribution: rhel5
Posts: 185
Blog Entries: 2

Original Poster
Rep: Reputation: 31
Quote:
Originally Posted by Mr. C. View Post
$ cidr 192.168.50.0 192.168.59.0
192.168.50.0/23
Not aware of "cidr" command. Tried to see help on my machine but there is not cidr command at all...
 
Old 08-01-2008, 01:55 AM   #6
Mr. C.
Senior Member
 
Registered: Jun 2008
Posts: 2,529

Rep: Reputation: 59
Its a perl script I've been using for a while, called cidr_range. Get it here:

http://www.irbs.net/internet/postfix...dr_range.pl.gz

You give a range of IPs

cidr_range 192.168.2.1 192.168.2.50

and it returns the shortest group of aggregates.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
WinXP x64 route path to VPN through VMware-> linux LandRover Linux - Networking 10 01-29-2009 09:36 AM
OpenVPN route issues, all traffic through VPN tunnel stuartornum Linux - Server 4 03-05-2007 03:07 AM
Can I Route Specific Addresses Through an IPSec VPN Tunnel? strick1226 Linux - Networking 3 12-15-2005 08:30 AM
I am not able to add a new route to my route table using route command prashanth s j Linux - Networking 2 09-03-2005 04:34 AM
trying to route though Cisco VPN client. DrkNite Linux - Networking 2 07-19-2005 11:35 PM


All times are GMT -5. The time now is 10:03 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration