OpenVZ Forum


Home » General » Support » IPSec-Server in a VPS
Re: IPSec-Server in a VPS [message #43027 is a reply to message #37207] Mon, 04 July 2011 14:42 Go to previous message
JohnDoe is currently offline  JohnDoe
Messages: 3
Registered: July 2011
Junior Member
groka76 wrote on Wed, 26 August 2009 13:28
Hi All,

I have work out configruation with Racoon.
...
The Racoon is installed in the host machine and send packet in the containter.
It needed set up a veth interface.
Ga


Hi groka76,

how did you achieve that? I also tried such scenario, but my packets always get dropped or didn't reach the VPS.

I have a openVZ host running racoon. I can establish a connection and the vpn client can ping the host's virtual bridge vmbr1 IP 10.0.2.254. But I can't reach/ping the VPS "behind" the virtual bridge with IP 10.0.2.123.
on "tcpdump -i eth0" in the VPS I can see the ICMP request, but there is no reply generated.
If I enter the VPS and ping the VPN client on 192.168.100.101 the ICMP packets are tunneled. I can see them on the VPN client with wireshark. A ICMP reply is generated, passes the tunnel and I can see it on the virtual bridge vmbr1 on the host ("tcpdump -i vmbr1") and inside the VPS ("tcpdump -i eth0"), but the ICMP replies got ignored or dropped?!?! --> no messages and 100% packet loss in the end.


best regards,
JD
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: problems with second container and venet
Next Topic: VE not reachable via ipsec-Tunnel using openswan and bridge-devices
Goto Forum:
  


Current Time: Fri Aug 16 11:59:58 GMT 2024

Total time taken to generate the page: 0.02911 seconds