Hi,
I've a problem with VPN and racoon on debian ETCH, Windows XP client (Shrew 1.1.0 release) and authentication with certificates x.509
server VPN LINUX (192.168.1.2) <--> router Zyxel 650H-E1 (192.168.1.1 LAN) and IP public <--> internet <--> Client Windows Shrew 1.1.0 release (assigned IP 192.168.1.20)
I've enable FORWARD of port 500 UDP and 4500 UDP in Zyxel router and the connection it's ok with no error in racoon.log. From windows client the ping to VPN server work properly (192.168.1.2)
The my problem is that can not any way to PING other host in the client network, 192.168.1.*, from windows clien VPN. The clients in same LAN of server VPN LINUX have DNS and GATEWAY 192.168.1.2 and surf in WEB and all local network properly.
I tried with "tcpdump" and traffic go in to the host 192.168.1.* but not return back, but from server VPN LINUX ping correctly. The file "/proc/sys/net/ipv4/ip_forward" in the VPN server LINUX is set to "1" and there aren't any IPTABLES configurations. If I configure an IP on
192.168.1.* in VPN server the PING from Windows Client answer properly. I have this files at the end: racoon.conf, psk.key, TCPDUMP 192.168.1.2 (OK), TCPDUMP 192.168.1.2 (NO PING), racoon.log and setkey -DP.
Someone has to give me some help. . . please, I have more ideas on what to do. . . help
Matteo
http://www.fileupyours.com/view/2236...1.2_PINGOK.wri
http://www.fileupyours.com/view/2236...1.3_NOPING.wri
http://www.fileupyours.com/view/223629/psk.txt
http://www.fileupyours.com/view/223629/racoon.conf
http://www.fileupyours.com/view/223629/racoon.log
http://www.fileupyours.com/view/223629/setkey.t
FORWARD configuration of Zyxel
Advance setup --> NAT --> SUA NAT Server Set --> Start port 500 End Port 500 IP Address 192.168.1.2
Advance setup --> NAT --> SUA NAT Server Set --> Start port 4500 End Port 4500 IP Address 192.168.1.2
Version of Firmware Router Zyxel 650H-E1
System Name :
ZyNOS F/W Version: V3.40(OL.2) |12/24/2004
DSL FW Version: Alcatel, Version 15.9.214
Standard: Multi-Mode
