Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.networking > #1007

VPN, L2TP, and problems with netmasks...

From Marcin Łukasik <marcin@milea.pl>
Newsgroups comp.os.linux.networking
Subject VPN, L2TP, and problems with netmasks...
Date 2012-01-23 04:54 -0800
Organization http://groups.google.com
Message-ID <5386824.2020.1327323263265.JavaMail.geo-discussion-forums@yqkm20> (permalink)

Show all headers | View raw


Hello,

Not exactly a Linux networking question, but please forgive me (but I'm pretty sure the firewall runs Linux).

I've set up a L2TP VPN on SonicWall NSA240 firewall.
It works. But it doesn't when I split the network in two subnets. 10.9.8.0/24 is my office, 10.9.9.0/24 is allocated for VPN users.
The problem occurs while accessing 10.9.8.0 over VPN.
It works on Windows, since Windows adds 10.0.0.0/8 route via VPN ("class-based route addition"). So when I say ping 10.9.8.x it works fine, since the packet goes over the VPN.
But on Mac this doesn't work, since Mac assumes a netmask of 255.255.255.0, therefore packet destined for 10.9.8.x goes via my default gateway, not VPN, and never reaches the host.

I found out that the only settings you can get over VPN are remote/local IPs of the tunnel and router's IP address.

My questions are:
1) What protocol is used to assign these IP settings to the client?
2) How the heck did this work in the past on an Apple server? We had two subnets too...

Thanks a lot in advance!
Martin

Back to comp.os.linux.networking | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

VPN, L2TP, and problems with netmasks... Marcin Łukasik <marcin@milea.pl> - 2012-01-23 04:54 -0800
  Re: VPN, L2TP, and problems with netmasks... Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-23 21:17 +0100
    Re: VPN, L2TP, and problems with netmasks... Marcin Łukasik <marcin@milea.pl> - 2012-01-24 03:51 -0800
    Re: VPN, L2TP, and problems with netmasks... ibuprofin@painkiller.example.tld.invalid (Moe Trin) - 2012-01-24 14:02 -0600

csiph-web