topic Re: Problem Access Routes with VPN in General Topics

Problem Access Routes with VPN

jmrodriguez — Sat, 14 Jul 2012 14:32:04 GMT

Hi everybody.

I've got a problem with my configuration of VPN for remote clients,If I configure only one access route (see picture1), I obtain the following routing table and everything works well:

As VPN client we are using vpnc from a Linux distribution (the same problem happens with cisco VPN client from windows computers)

If I configure only one access route (see picture1), I obtain the following routing table and everything works well:

Kernel IP routing table

Destination Gateway Genmask Flags MSS Window irtt Iface

193.144.152.5 192.168.1.1 255.255.255.255 UGH 1500 0 0 wlan0

1.1.1.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0

192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan0

10.0.0.0 0.0.0.0 255.0.0.0 U 0 0 0 tun0

0.0.0.0 192.168.1.1 0.0.0.0 UG 0 0 0 wlan0

If I configure more than one access route (see picture2), I don't obtain the correct routes and I lose the default gateway route:

Kernel IP routing table

Destination Gateway Genmask Flags MSS Window irtt Iface

193.144.152.5 192.168.1.1 255.255.255.255 UGH 1500 0 0 wlan0

1.1.1.3 0.0.0.0 255.255.255.255 UH 0 0 0 tun0

192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 wlan0

0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 tun0

Please, can you help me? Anyone with similar problem?

Re: Problem Access Routes with VPN

jmrodriguez — Mon, 16 Jul 2012 07:29:37 GMT

Sorry, one correction:

Picture1: more than one subnets in Access Route configuration

Picture2: only one subnet in Access Route configuration

I've figured out that the problem can be related to a try of summarize subnets of the vpnc client, but I'm not sure. Could you help me please?

Thank you.

Re: Problem Access Routes with VPN

jmrodriguez — Mon, 30 Jul 2012 08:31:10 GMT

Anyone with the same problem? Could you help me please?

Re: Problem Access Routes with VPN

jmrodriguez — Fri, 31 Aug 2012 10:52:27 GMT

Hi.

Finally I've created a shell script using vpnc command to connect and add the routes. It works.

In my opinion, PaloAlto should offer a solution for GlobalProtect VPN on Linux platforms, in case they want to take advantage over their competitors.

Bye!