#1043 closed request (wontfix)
MacOS 10.11.5 "Cisco IPsec" VPN does not work on ietf-nat64 ssid
| Reported by: | Bill Fenner | Owned by: | |
|---|---|---|---|
| Priority: | tbd | Milestone: | ietf-097 |
| Component: | nat64 | Keywords: | |
| Cc: | My Current Location: | ||
| My MAC Address: | My OS: |
Description
While the VPN session will connect, it is not usable. I don't know have any more sensible debugging than this:
fenner:~ fenner$ ping 8.8.8.8 PING 8.8.8.8 (8.8.8.8): 56 data bytes ping: sendto: No route to host ^C --- 8.8.8.8 ping statistics --- 1 packets transmitted, 0 packets received, 100.0% packet loss
The routing table *does* have routes, including a default route pointing to utun5.
Routing table and interface configuration on ietf-nat64, not working:
Internet: Destination Gateway Flags Refs Use Netif Expire default link#17 UCS 6 0 utun5 8.8.8.8 link#17 UHWIi 1 0 utun5 10.95.1.118 10.95.1.118 UH 2 61 utun5 54.84.44.91 link#17 UHWIi 1 1 utun5 127 127.0.0.1 UCS 1 0 lo0 127.0.0.1 127.0.0.1 UH 9 36646 lo0 162.210.130.103/32 link#4 UCS 1 0 en0 169.254 link#4 UCS 2 0 en0 169.254.173.36/32 link#4 UCS 1 0 en0 172.22.22.10 link#17 UHWIi 1 1 utun5 172.22.22.40 link#17 UHWIi 50 2079 utun5 224.0.0 link#4 UmCS 2 0 en0 224.0.0.251 1:0:5e:0:0:fb UHmLWI 1 0 en0 239.255.255.250 link#17 UHmWI 1 27 utun5 255.255.255.255/32 link#4 UCS 1 0 en0 fenner:~ fenner$ ifconfig utun5 utun5: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280 inet 10.95.1.118 --> 10.95.1.118 netmask 0xffffffff
Routing table and interface configuration on ietf, working:
fenner:~ fenner$ netstat -nr Routing tables Internet: Destination Gateway Flags Refs Use Netif Expire default link#17 UCS 45 0 utun5 default 31.133.128.1 UGScI 32 0 en0 4.2.2.2 link#17 UHWIi 1 20 utun5 8.8.8.8 link#17 UHWIi 1 0 utun5 10.95.1.125 10.95.1.125 UH 2 93 utun5 17.133.252.233 link#17 UHWIi 2 60 utun5 17.146.1.72 link#17 UHWIi 1 72 utun5 17.151.237.79 link#17 UHWIi 1 14 utun5 17.167.152.13 link#17 UHWIi 1 438 utun5 17.167.194.234 link#17 UHWIi 1 21 utun5 17.173.66.94 link#17 UHWIi 2 23 utun5 17.188.138.72 link#17 UHWIi 2 18 utun5 17.248.128.178 link#17 UHWIi 1 33 utun5 17.248.128.235 link#17 UHWIi 1 80 utun5 17.248.128.241 link#17 UHWIi 1 19 utun5 17.249.12.19 link#17 UHWIi 2 25 utun5 17.253.26.125 link#17 UHWIi 2 2 utun5 23.4.16.73 link#17 UHWIi 3 33 utun5 23.21.54.178 link#17 UHWIi 1 52 utun5 23.21.225.196 link#17 UHWIi 1 27 utun5 23.23.150.132 link#17 UHWIi 1 17 utun5 23.34.166.242 link#17 UHWIi 1 30 utun5 31.130.229.12 link#17 UHWIi 2 265 utun5 31.133.128/20 link#4 UCS 2 0 en0 31.133.128.1/32 link#4 UCS 2 0 en0 31.133.128.1 0:0:5e:0:1:80 UHLWIir 34 0 en0 861 31.133.142.122/32 link#4 UCS 1 0 en0 54.84.44.91 link#17 UHWIi 1 14 utun5 54.153.116.159 link#17 UHWIi 2 32 utun5 54.192.141.60 link#17 UHWIi 2 31 utun5 74.125.28.108 link#17 UHWIi 2 59 utun5 74.125.28.109 link#17 UHWIi 2 35 utun5 74.125.199.188 link#17 UHWIi 2 23 utun5 74.125.199.189 link#17 UHWIi 4 367 utun5 127 127.0.0.1 UCS 1 0 lo0 127.0.0.1 127.0.0.1 UH 9 36734 lo0 149.20.62.18 link#17 UHWIi 2 148 utun5 162.210.130.103 31.133.128.1 UGHS 3 1 en0 169.254 link#4 UCS 1 0 en0 172.22.22.10 link#17 UHWIi 1 4 utun5 172.22.22.15 link#17 UHWIi 1 314 utun5 172.22.22.40 link#17 UHWIi 1 425 utun5 172.217.1.131 link#17 UHWIi 2 29 utun5 172.217.4.170 link#17 UHWIi 1 40 utun5 172.217.5.100 link#17 UHWIi 1 57 utun5 174.129.34.9 link#17 UHWIi 1 84 utun5 184.24.174.52 link#17 UHWIi 1 16 utun5 184.29.44.66 link#17 UHWIi 1 78 utun5 213.73.98.52 link#17 UHWIi 1 26 utun5 216.58.211.131 link#17 UHWIi 2 8 utun5 216.58.212.131 link#17 UHWIi 1 8 utun5 216.58.219.3 link#17 UHWIi 2 29 utun5 216.58.219.5 link#17 UHWIi 2 481 utun5 216.58.219.14 link#17 UHWIi 7 235 utun5 224.0.0 link#4 UmCS 2 0 en0 224.0.0.251 1:0:5e:0:0:fb UHmLWI 1 0 en0 239.255.255.250 link#17 UHmWI 1 65 utun5 255.255.255.255/32 link#4 UCS 1 0 en0 fenner:~ fenner$ ifconfig utun5 utun5: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280 inet 10.95.1.125 --> 10.95.1.125 netmask 0xffffffff
Note: See TracTickets for help on using tickets.
Thank you for your report, but we can't fix it because it is the issue of the application.
Sorry.