[vpnc-devel] Successfull Connection - Can't Ping Host

[Maurice Massar]

hi,

On Sun, Aug 27, 2006 at 12:40:28PM +0200, tps at netmaster.dk wrote:
>  - ping vpn host 192.168.1.102 
...
> eth0      Link encap:Ethernet  HWaddr 00:01:80:5E:93:4B
>          inet addr:192.168.1.89  Bcast:192.168.1.255  Mask:255.255.255.0
...
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use 
> Iface
> ipsecgw         p600            255.255.255.255 UGH   0      0        0 eth0
> 192.168.1.0     *               255.255.255.0   U     0      0        0 eth0
> loopback        *               255.0.0.0       U     0      0        0 lo
> default         *               0.0.0.0         U     0      0        0 tun0
...
> PING 192.168.1.102 (192.168.1.102) 56(84) bytes of data.
>  From 192.168.1.89 icmp_seq=1 Destination Host Unreachable
>  From 192.168.1.89 icmp_seq=2 Destination Host Unreachable
>  From 192.168.1.89 icmp_seq=3 Destination Host Unreachable
>  From 192.168.1.89 icmp_seq=4 Destination Host Unreachable 
> 
>  --- 192.168.1.102 ping statistics ---
> 4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 3003ms
> , pipe 3

this is because your routing says that 192.168.1.102 is on your local
network. The packets never get send over the tun0 interface to vpnc.

You can either set an explicit route for this single host (with
"route add -host 192.168.1.102 dev tun0") or better, change your
local network to one which is not used on the other side of the
vpn.

cu
maurice