openssh unix dev - Jul 2008 - ssh-vpn linux<->openbsd

Hi,
I'm trying a VPN via ssh between Linux (Suse 10.3, 5.0) and OpenBSD
(4.2, 4.7). But it doesn't work...

On Linux:
sudo ssh -v -f -w 0:1 $OPENBSD true
sudo /sbin/ifconfig tun0 10.1.1.1 10.1.1.2
sudo /sbin/route add -net 192.168.17.0 netmask 255.255.255.0 dev tun0

On OBSD:
sudo ifconfig tun1 10.1.1.2 10.1.1.1 netmask 255.255.255.0
sudo /sbin/route add 10.0.3.0/24 10.1.1.1
And add a "pass quick on tun1" to /etc/pf.conf

Then I have:
- Linux:
tun0      Link encap:UNSPEC  HWaddr
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
         inet addr:10.1.1.2  P-t-P:10.1.1.2  Mask:255.255.255.255
         UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
         RX packets:18 errors:0 dropped:0 overruns:0 frame:0
         TX packets:23 errors:0 dropped:0 overruns:0 carrier:0
         collisions:0 txqueuelen:500
         RX bytes:1512 (1.4 Kb)  TX bytes:1932 (1.8 Kb)
192.168.17.0    0.0.0.0         255.255.255.0   U     0      0        0 tun0
- OpenBSD:
tun1: flags=51<UP,POINTOPOINT,RUNNING> mtu 1500
       groups: tun
       inet 10.1.1.2 --> 10.1.1.1 netmask 0xffffff00
10.0.3/24          10.1.1.1           UGS         0        8      -   tun1
10.1.1.1           10.1.1.2           UH          1        0      -   tun1

But the systems can't ping each other. :-(

What's missing?

TIA
  Martin

On Mon, Jul 07, 2008 at 11:56:07AM +0200, Martin Schr?der
wrote:
> On Linux:
> sudo ssh -v -f -w 0:1 $OPENBSD true
> sudo /sbin/ifconfig tun0 10.1.1.1 10.1.1.2
> sudo /sbin/route add -net 192.168.17.0 netmask 255.255.255.0 dev tun0
ifconfig and route are out of style. :)

Try this instead:

ip a a 10.1.1.1 peer 10.1.1.2 dev tun0
ip r a 192.168.17.0/24 via 10.1.1.2

> On OBSD:
> sudo ifconfig tun1 10.1.1.2 10.1.1.1 netmask 255.255.255.0
> sudo /sbin/route add 10.0.3.0/24 10.1.1.1
> And add a "pass quick on tun1" to /etc/pf.conf
> 
> Then I have:
> - Linux:
> tun0      Link encap:UNSPEC  HWaddr
> 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
>          inet addr:10.1.1.2  P-t-P:10.1.1.2  Mask:255.255.255.255
                            ^
That's not right, that should be a 1 right there.


//Peter