freebsd security - Apr 2005 - IPSEC l2tpd and Windows shares problem

Dear all,

I am running IPSEC and l2tpd in FreeBSD 4.9. 

I am able to connect from WindowsXP to this FreeBSD box . I am also able to 
ping the Hosts behind the IPSEC gateway, connect to internal ftp servers, 
browse intranet websites etc. 

However I am not able to browse network shares (windows and samba both). It 
does prompts for Username/password when we try to access directly , but it 
will never show the network shares.

If I connect to a linux IPSEC gateway  using  rp-l2tp there is no problem.


/usr/local/etc/l2tp/l2tpd.conf
===================================[global]
port = 1701

[lns default]
ip range = 192.168.0.129 - 192.168.0.254
local ip = 192.168.0.2
hostname = freebsdipsec
name = freebsdipsec
ppp debug = yes
pppoptfile = /usr/local/etc/l2tp/options.l2tpd
======================================/usr/local/etc/l2tp/options.l2tpd
======================================noauth
proxyarp
lcp-echo-interval 30
lcp-echo-failure 6
ms-dns 192.168.0.3
ms-dns 192.168.0.4
ms-wins 192.168.0.6
crtscts
idle 1800
mtu 1400
mru 1400
lock
nodetach
debug
===================================
Note: the IP address of the Private Interface is 192.168.0.1/24

-- 
With regards,

Vicky Shrestha

At 04:32 AM 17/04/2005, Vicky Shrestha wrote:
>Dear all,
>
>I am running IPSEC and l2tpd in FreeBSD 4.9.
>mtu 1400
>mru 1400

It sounds like you have the PMTU issue covered, but it also sounds like an 
MTU issue.  Can you try and generate some large ping packets and see if 
they are being fragmented properly ?  hping is useful for this as you can 
toggle the DF bit as well as send non ICMP type packets.

Also, are the IPSEC polices all installed properly ?

         ---Mike