Problem connecting to Cisco VPN

[svenaron]

Hi,

I'm trying to connect to a Cisco VPN server from my B3
I installed vpnc from squeeze-backports (0.5.3r512).

I use this config:

IPSec gateway windvpn1
IPSec ID WRSSDI
IPSec secret #mysecret#
IKE Authmode psk
IKE DH Group dh2
Xauth username myusername

And this vpnc:

vpnc version 0.5.3r512
Copyright (C) 2002-2006 Geoffrey Keating, Maurice Massar, others
vpnc comes with NO WARRANTY, to the extent permitted by law.
You may redistribute copies of vpnc under the terms of the GNU General
Public License. For more information about these matters, see the files
named COPYING.
Built with certificate support.

Supported DH-Groups: nopfs dh1 dh2 dh5
Supported Hash-Methods: md5 sha1
Supported Encryptions: null des 3des aes128 aes192 aes256
Supported Auth-Methods: psk psk+xauth hybrid(rsa)

It connects and everything seems well except that I cannot get any traffic through, I can't even ping the DNS servers. The same version of vpnc and config file on my laptop (Debian Jessie) on the same network works fine. The resulting resolv.conf and routing tables are identical on B3 and laptop.

I read here on the vpnc-devel mailing list that IPSEC sometimes intercepts ESP traffic but I'm not quite sure how to check if that's the case here.

Any help would be much appreciated!

[Gordon]

Sounds familiar....

Does this topic apply?
(the fix won't work any more I'm afraid)

[svenaron]

Thanks for the tip, though my problem was unrelated it lead me to trying tcpdump on tun0 to see if packets were flowing. It turns out that it's iptables that's dropping my packets.
I need a rule

Code: Select all

iptables -A INPUT -i tun0 -j ACCEPT

With that in place VPN works