Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Shrew windows tunnel works, linux tunnel fails

    Scheduled Pinned Locked Moved IPsec
    13 Posts 3 Posters 4.4k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • M
      Metu69salemi
      last edited by

      when tunnel is up try```
      route

      1 Reply Last reply Reply Quote 0
      • E
        El Snorro
        last edited by

        Route command if vpn active:

        Destination    Gateway        Genmask        Flags Metric Ref    Use Iface
        192.168.78.0    *                    255.255.255.0  U    0      0        0 tap0
        192.168.3.0    *                    255.255.255.0  U    1      0        0 eth0
        192.168.3.0    *                    255.255.255.0  U    2      0        0 wlan0
        192.168.0.0    192.168.78.1    255.255.254.0  UG    0      0        0 tap0
        link-local      *                          255.255.0.0    U    1000  0        0 eth0
        default        192.168.3.1          0.0.0.0        UG    0      0        0 eth0

        192.168.78.x is my ipsec mobile client range configured in PFsense.
        192.168.0.x/23 is my remote subnet.
        192.168.3.x is my local network (in this instance at home).

        Looks good to me??
        Anyone some tips?

        1 Reply Last reply Reply Quote 0
        • M
          Metu69salemi
          last edited by

          and what rules you have in vpn tunnel itself?

          1 Reply Last reply Reply Quote 0
          • E
            El Snorro
            last edited by

            @Metu69salemi:

            and what rules you have in vpn tunnel itself?

            On my pfsense box you mean?

            1 Reply Last reply Reply Quote 0
            • P
              podilarius
              last edited by

              Yes, you must have firewall rules in the VPN (racoon or openVPN) before it allows traffic to pass over the VPN.

              1 Reply Last reply Reply Quote 0
              • E
                El Snorro
                last edited by

                @podilarius:

                Yes, you must have firewall rules in the VPN (racoon or openVPN) before it allows traffic to pass over the VPN.

                I have configured my firewall rules correctly, since traffic can go trough the tunnel on a windows client.

                1 Reply Last reply Reply Quote 0
                • P
                  podilarius
                  last edited by

                  Do you have iptables enabled on the linux system?

                  1 Reply Last reply Reply Quote 0
                  • E
                    El Snorro
                    last edited by

                    No

                    1 Reply Last reply Reply Quote 0
                    • M
                      Metu69salemi
                      last edited by

                      Then i don't know, sorry

                      1 Reply Last reply Reply Quote 0
                      • P
                        podilarius
                        last edited by

                        If you traceroute from the linux system to something behind the remote firewall, where does it hang in the path?

                        1 Reply Last reply Reply Quote 0
                        • E
                          El Snorro
                          last edited by

                          Enabled tunnel, gave command route and traceroute… (this is from a different location)

                          thijs@ltthijslinux ~ $ route
                          Kernel IP routing table
                          Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
                          172.28.201.0    *               255.255.255.0   U     1      0        0 eth0
                          192.168.78.0    *               255.255.255.0   U     0      0        0 tap0
                          192.168.0.0     192.168.78.1    255.255.254.0   UG    0      0        0 tap0
                          link-local      *               255.255.0.0     U     1000   0        0 eth0
                          default         172.28.201.254  0.0.0.0         UG    0      0        0 eth0
                          thijs@ltthijslinux ~ $ traceroute 192.168.0.1
                          traceroute to 192.168.0.1 (192.168.0.1), 30 hops max, 60 byte packets
                           1  * * *
                           2  * * *
                           3  * * *
                           4  * * *
                           5  * * *
                          
                          1 Reply Last reply Reply Quote 0
                          • P
                            podilarius
                            last edited by

                            Not sure … I tested my Shew in Linux and it worked. Though mine it not using a tunnel interface. I have use existing adapter and I have a policy of the remote network.

                            1 Reply Last reply Reply Quote 0
                            • First post
                              Last post
                            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.