我正试图用我的Ubuntu笔记本电脑连接到内部客户端网络,但是客户端使用的是Nortel的Contivity VPN,所以它只在Windows中工作。我的想法是使用VirtualBox与Windows建立VPN连接,然后使用Windows作为路由器通过VPN从我的Ubuntu主机路由流量。
我将VirtualBox中的第一个适配器配置为NAT,以使互联网访问更加容易。我将第二个适配器配置为“纯主机”,因此我现在可以在Ubuntu上看到一个新的vboxnet0接口,并在Windows中看到第二个适配器,其中我配置了一个静态IP。
我已经验证了我可以将Ubuntu切换到Windows,Windows可以切换到Ubuntu。
路由表如下所示:
C:\Documents and Settings\val>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...08 00 27 55 ee 35 ...... AMD PCNET Family PCI Ethernet Adapter #2 - Packet Scheduler Miniport
0x3 ...08 00 27 5f 3e 93 ...... AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport
0x4 ...44 45 53 54 42 00 ...... Nortel IPSECSHM Adapter - Packet Scheduler Miniport
0x5 ...00 00 00 00 00 01 ...... AGN Virtual Network Adapter - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.2.2 10.0.2.15 20
10.0.2.0 255.255.255.0 10.0.2.15 10.0.2.15 20
10.0.2.15 255.255.255.255 127.0.0.1 127.0.0.1 20
10.255.255.255 255.255.255.255 10.0.2.15 10.0.2.15 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.56.0 255.255.255.0 192.168.56.2 192.168.56.2 20
192.168.56.2 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.56.255 255.255.255.255 192.168.56.2 192.168.56.2 20
224.0.0.0 240.0.0.0 10.0.2.15 10.0.2.15 20
224.0.0.0 240.0.0.0 192.168.56.2 192.168.56.2 20
255.255.255.255 255.255.255.255 10.0.2.15 10.0.2.15 1
255.255.255.255 255.255.255.255 192.168.56.2 5 1
255.255.255.255 255.255.255.255 192.168.56.2 4 1
255.255.255.255 255.255.255.255 192.168.56.2 192.168.56.2 1
Default Gateway: 10.0.2.2
===========================================================================
Persistent Routes:
None192.168.56.2是第二个连接到Ubuntu端的192.168.56.1的适配器。
现在,当我建立VPN连接时,路由表被Contivity更改,我不能再对主机进行平分,而主机也不能对来宾进行ping。下面是运行VPN的路由表:
C:\Documents and Settings\val>route print
===========================================================================
Interface List
0x1 ........................... MS TCP Loopback interface
0x2 ...08 00 27 55 ee 35 ...... AMD PCNET Family PCI Ethernet Adapter #2 - Packet Scheduler Miniport
0x3 ...08 00 27 5f 3e 93 ...... AMD PCNET Family PCI Ethernet Adapter - Packet Scheduler Miniport
0x4 ...44 45 53 54 42 00 ...... Nortel IPSECSHM Adapter - Packet Scheduler Miniport
0x5 ...00 00 00 00 00 01 ...... AGN Virtual Network Adapter - Packet Scheduler Miniport
===========================================================================
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.0.2.2 10.0.2.15 21
0.0.0.0 0.0.0.0 192.168.32.29 192.168.32.29 1
10.0.2.0 255.255.255.0 10.0.2.15 10.0.2.15 20
10.0.2.0 255.255.255.0 192.168.32.29 192.168.32.29 1
10.0.2.15 255.255.255.255 127.0.0.1 127.0.0.1 20
10.255.255.255 255.255.255.255 10.0.2.15 10.0.2.15 20
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1
192.168.32.0 255.255.248.0 192.168.32.29 192.168.32.29 30
192.168.32.29 255.255.255.255 127.0.0.1 127.0.0.1 30
192.168.32.255 255.255.255.255 192.168.32.29 192.168.32.29 30
192.168.56.0 255.255.255.0 192.168.56.2 192.168.56.2 20
192.168.56.0 255.255.255.0 192.168.32.29 192.168.32.29 1
192.168.56.2 255.255.255.255 127.0.0.1 127.0.0.1 20
192.168.56.255 255.255.255.255 192.168.56.2 192.168.56.2 20
192.197.71.160 255.255.255.255 10.0.2.2 10.0.2.15 1
224.0.0.0 240.0.0.0 10.0.2.15 10.0.2.15 20
224.0.0.0 240.0.0.0 192.168.56.2 192.168.56.2 20
224.0.0.0 240.0.0.0 192.168.32.29 192.168.32.29 1
255.255.255.255 255.255.255.255 10.0.2.15 10.0.2.15 1
255.255.255.255 255.255.255.255 192.168.32.29 192.168.32.29 1
255.255.255.255 255.255.255.255 192.168.56.2 5 1
255.255.255.255 255.255.255.255 192.168.56.2 192.168.56.2 1
Default Gateway: 192.168.32.29
===========================================================================
Persistent Routes:
None通过查看路由表,我不明白为什么我失去了ping 192.168.56.1的能力,所以我希望得到一些帮助,或者关于如何进一步解决这个问题的一些想法。
发布于 2011-09-17 11:31:59
作为VPN策略标准安全实践的一部分,拆分隧道可能已被禁用。您可能会向VPN管理员(S)询问VPN会话是否允许拆分隧道(您可能不想屏住呼吸,因为狭缝隧道通常被认为是糟糕的安全实践)。
https://serverfault.com/questions/311400
复制相似问题