Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.networking > #1009

Re: VPN, L2TP, and problems with netmasks...

Show all headers | View raw

Hello,

Marcin Lukasik a écrit :
> 
> I've set up a L2TP VPN on SonicWall NSA240 firewall.
> It works. But it doesn't when I split the network in two subnets.
> 10.9.8.0/24 is my office, 10.9.9.0/24 is allocated for VPN users.
> The problem occurs while accessing 10.9.8.0 over VPN.
> It works on Windows, since Windows adds 10.0.0.0/8 route via VPN
> ("class-based route addition"). So when I say ping 10.9.8.x it works
> fine, since the packet goes over the VPN.

This is so wrong, even it does what you need.
Classes are deprecated.

> But on Mac this doesn't work, since Mac assumes a netmask of
> 255.255.255.0, therefore packet destined for 10.9.8.x goes via my
> default gateway, not VPN, and never reaches the host.
> 
> I found out that the only settings you can get over VPN are
> remote/local IPs of the tunnel and router's IP address.
> 
> My questions are:
> 1) What protocol is used to assign these IP settings to the client?

As L2TP usually transports PPP sessions, I guess it is IPCP, the
protocol used by PPP to negotiate IP parameters such as the remote and
local addresses is IPCP. AFAIK, it does not allow to "push" routes like
OpenVPN does. So you need to add the route by other means when the
tunnel is up. Any decent PPP software should be able to do it.

Back to comp.os.linux.networking | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

VPN, L2TP, and problems with netmasks... Marcin Łukasik <marcin@milea.pl> - 2012-01-23 04:54 -0800
  Re: VPN, L2TP, and problems with netmasks... Pascal Hambourg <boite-a-spam@plouf.fr.eu.org> - 2012-01-23 21:17 +0100
    Re: VPN, L2TP, and problems with netmasks... Marcin Łukasik <marcin@milea.pl> - 2012-01-24 03:51 -0800
    Re: VPN, L2TP, and problems with netmasks... ibuprofin@painkiller.example.tld.invalid (Moe Trin) - 2012-01-24 14:02 -0600

csiph-web