From: Aaron Nichols (adnicholsgmail.com)
Date: Mon Nov 08 2004 - 15:32:49 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Mon, 08 Nov 2004 11:12:46 +0100, Genaker Administrator
<rootgenaker.net> wrote:

> I ping from 172.16.14.5 to 10.10.28.31 and I can see the echo request
> encapsulated going out,
> but I can't see any echo reply back...
> Can anyone help me?

Are you able to verify that the other end is actually recieving the
encapsulated traffic, decapsulating it and that a response is even
being sent from the machine you are trying to ping?

If you can verify that - do you see any ESP traffic being sent to
X.X.X.X (I think - hard to decrypt the diagram) from Y.Y.Y.Y - as you
should see if an encapsulated repsonse was being sent?

If ESP traffic is not coming back - you probably want to make sure the
remote site is setup correctly, etc. If you are seeing ESP return
traffic but it's not being decapsulated then perhaps you have a pf
configuration issue? An allow rule for esp should be sufficient.

Aaron

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]