[SWLUG] CIPE VPN two LANs problem

[David Elir Evans]

I am experimenting with connecting two LANs with private ip addresses
over the internet using cipe.
LAN A 192.168.0.0/24
LAN B 192.168.1.0/24

The gateway machines are gwa 192.168.0.1 and gwb 192.168.1.1

gwa's virtual ip address is 192.168.0.1 as is it's real internal interface address
gwb's virtual ip address is 192.168.1.1 as is it's real internal interface address

working on gwa, I can access gwb using it's virtual ip address and vice versa.
So I think that CIPE itself is set up OK.


However if I am on a host on LAN A I cannont ping the gwb using the virtual ip address.  Also if I am on gwb, I cannot ping an internal host on LAN A.  I get the following for each ping (with different value for SEQ)....

IN=cipcp0 OUT=eth0 SRC=192.168.1.1 DST=192.168.0.7 LEN=84 TOS=0x00 PREC=0x00 TTL=63 ID=0 DF PROTO=ICMP TYPE=8 CODE=0 ID=51467 SEQ=256

Extract of Routing table for gwb reads ....

eth0 - Exteral interface  (cable modem)
eth1 - Internal LAN interface 
cipcb0 - cipe virtual interface

Kernel ip routing table
Destination	Gateway		Genmask			Iface
192.168.0.1	*		255.255.255.255		cipcb0
81.101.208.0	*		255.255.255.0		eth0
192.168.1.0	*		255.255.255.0		eth1
192.168.0.0	192.168.0.1	255.255.255.255		cipcb0
127.0.0.1	*		255.0.0.0		lo
default		pc2-cwma1-6-gw. 0.0.0.0			eth0

Do I have my routing set up OK ?
Am I right in believing that my cipe configuration is OK ?
Is it my iptables firewall that is causing the problem ?

Regards

David Evans