Routing problem

Martin Schweizer pcservi at spectraweb.ch
Tue Nov 18 14:17:13 PST 2003


Hello

My goals are:
- to use an Win2k server (terminal server) in a lan over the internet (FreeBSD 
box with pptpd)

My equipment:
- Win2k server, SP4 (test machine)
  - file server
  - telnet server
  IP: 192.168.1.50
  
- FreeBSD 4.8
  - firewall (all rules works very well, also ftp etc.)
  - VPN server (PopTop 1.1.4-b3). I have access from the Internet to
    this box over a VPN (=pptp) connection
  - ssh server 
  - DynDNS client
  IP router side: 192.168.2.2
  IP LAN (Win2k server) side: 192.168.1.1

- Router
  ADSL Router ZyXel Prestige 642R-I
  IP: 192.168.2.3
  
Here is the schema:

client in                      FreeBSD              Win2k
the Internet     Router        box                  server
   ----          ----      xl1 ---- xl0             ----
   |  | -------> |  | -------> |  | --------------> |  |
   ----          ----          ----                 ----
(for example:
 Win2k, Win9x)


If I start a pptp connect from the client in the internet (they receive an ip 
from 192.168.1.200 to .210), I can ping 192.168.1.1 without problem. Also I 
can ping from my FreeBSD box the remote client and the Win2k server. From the 
Win2k server I can alway ping the FreeBSD box but not the client in the 
internet. I also set manualy the arp resolution (MAC adress with ip adress) on 
both side but also no luck.
I started also tcpdump on the FreeBSD box with the following result:

Pings from the client to Win2k server. tcpdump start with options -n -i xl0 
icmp:
23:18:20.217987 192.168.1.206 > 192.168.1.50: icmp: echo request
23:18:21.677929 192.168.1.206 > 192.168.1.50: icmp: echo request
23:18:22.693478 192.168.1.206 > 192.168.1.50: icmp: echo request
23:18:23.709587 192.168.1.206 > 192.168.1.50: icmp: echo request

here the same with options -n -i xl0 arp:
23:20:28.412407 arp who-has 192.168.1.206 tell 192.168.1.50
23:20:29.685452 arp who-has 192.168.1.206 tell 192.168.1.50
23:20:30.701281 arp who-has 192.168.1.206 tell 192.168.1.50
23:20:31.717197 arp who-has 192.168.1.206 tell 192.168.1.50

Pings from the Win2k server to the client. tcpdump started like above (icmp):
... no output

here the same like above (arp)
23:23:24.855173 arp who-has 192.168.1.206 tell 192.168.1.50
23:23:25.923374 arp who-has 192.168.1.206 tell 192.168.1.50
23:23:26.924785 arp who-has 192.168.1.206 tell 192.168.1.50
23:23:27.926212 arp who-has 192.168.1.206 tell 192.168.1.50

I also deactivetd the firewall but also no success.

What the hell is going wrong here?


-- 

Regards

Martin Schweizer
<info at pc-service.ch>

PC-Service M. Schweizer; Gewerbehaus Schwarz; CH-8608 Bubikon
Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch;
public key : http://www.pc-service.ch/pgp/public_key.asc; 
fingerprint: EC21 CA4D 5C78 BC2D 73B7  10F9 C1AE 1691 D30F D239;

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 187 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20031118/f4993f62/attachment.bin


More information about the freebsd-questions mailing list