Hello,
vpnc 0.5.1 installed on a centos-4-i386-default VE seems to lock out local network traffic when the VPN is established. I can't even ping the VE from the host.
This is before establishing the VPN. The host is 192.168.2.20, and the VE is 192.168.2.101
[root@ovhost ~]# uname -a
Linux ovhost 2.6.18-53.1.13.el5.028stab053.10 #1 SMP Tue Apr 1 14:58:47 MSD 2008 i686 i686 i386 GNU/Linux
[root@ovhost ~]# ping -c 3 192.168.2.101
PING 192.168.2.101 (192.168.2.101) 56(84) bytes of data.
64 bytes from 192.168.2.101: icmp_seq=0 ttl=64 time=0.449 ms
64 bytes from 192.168.2.101: icmp_seq=1 ttl=64 time=0.150 ms
64 bytes from 192.168.2.101: icmp_seq=2 ttl=64 time=0.000 ms
--- 192.168.2.101 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2002ms
rtt min/avg/max/mdev = 0.000/0.199/0.449/0.187 ms, pipe 2
[root@ovhost ~]# vzctl exec 101 route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
192.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 venet0
AAA.AAA.0.0 0.0.0.0 255.255.0.0 U 0 0 0 venet0
0.0.0.0 192.0.2.1 0.0.0.0 UG 0 0 0 venet0
[root@ovhost ~]#
Now when I establish the VPN :
[root@ovhost ~]# vzctl exec 101 /usr/local/sbin/vpnc
VPNC started in background (pid: 9828)...
[root@ovhost ~]# ping 192.168.2.101
PING 192.168.2.101 (192.168.2.101) 56(84) bytes of data.
<killed>
--- 192.168.2.101 ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 7005ms
[root@ovhost ~]# vzctl exec 101 route -n
Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
CCC.CCC.CCC.CCC 0.0.0.0 255.255.255.255 UH 0 0 0 venet0
DDD.DDD.DDD.DDD 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
EEE.EEE.EEE.EEE 0.0.0.0 255.255.255.255 UH 0 0 0 tun0
192.0.2.0 0.0.0.0 255.255.255.0 U 0 0 0 venet0
AAA.AAA.0.0 0.0.0.0 255.255.0.0 U 0 0 0 venet0
192.168.0.0 0.0.0.0 255.255.0.0 U 0 0 0 tun0
172.16.0.0 0.0.0.0 255.240.0.0 U 0 0 0 tun0
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 tun0
[root@ovhost ~]# vzctl exec 101 /usr/local/sbin/vpnc-disconnect
Terminating vpnc daemon (pid: 9828)
[root@ovhost ~]#
I have run a few scripts and the VPN within the VE seems indeed operational. However I cannot ssh into the VE while the VPN is up. Existing ssh sessions time out.
I have tried installing vpnc in the host and it works like a charm, without locking out local traffic.
What am I missing ?
TIA,
OpenVZ Forum
Members
Search
Help
Register
Login
Home
