IPSEC a ping

[Petr Vejsada]

Anton Caniga wrote:

> Dobry den,

> mam jeden problemik.Robim prepojenie medzi winXp klientom a linux-server.
> Ipsec mi nabehne a do log napise toto:

> no ping z winxp na lan mi nefunguje:
> 
> #tcpdump -i ipsec0
> 
> 5:16:43.758047 195.46.168.201 > 192.168.1.1: icmp: echo request
> 15:16:43.758201 192.168.1.1 > 195.46.168.201: icmp: echo reply
> 15:16:43.758255 195.46.69.6 > 195.46.168.201: ESP(spi=0x9af4a98a,seq=0xc)

To je prece OK, ne ? Na ipsec0 tcpdumpujes uz odsifrovane pakety, musis 
monitorovat ethX. Jen nechapu, co na ipsec0 dela ten ESP paket.

Alespon mne to tak chodi - dumpovani ipsec0 = odsifrovane pakety (treba ty 
icmp) a dump na eth0 - same ESP pakety.

-- 
Zdraví
Petr Vejsada
ID klíče: 2BDE1F6C
Fingerprint klíče FDA9 F8A1 276B 1E28 544E  87CE 3642 C9E8 2BDE 1F6C