Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are developing app for device named iTach WF2IR, but we doesn't actually have that device, we will get one in 4 weeks or so. Meanwhile, we should make demo for that device in a week. So we decided to connect through VPN to the remote mac connected to that device, located abroad, and then connect to device through that mac.

We connected remote mac to our VPN server (got IP 172.17.x.x), and also connected that mac to Wi-Fi network created by device. Device has static IP, and it gave remote mac DHCP-generated IP in the same network.

Also I connected my mac to the same VPN, and performed following:

route add 172.17.x.x

Where 172.17.x.x is remote mac IP, so we could access to the device through remote mac.

On the remote mac we have configured firewall to bypass connections:

# Force a flushing of the current rules before we reload.
$fwcmd -f flush
# pass all through loopback device
${fwcmd} add pass all from any to any via lo
${fwcmd} add pass all from any to any via en1
${fwcmd} add pass all from any to any via fxp0
${fwcmd} add allow all from any to
${fwcmd} add allow all from to any
${fwcmd} nat 1 config  if $en1 reset deny_in redirect_port  tcp 80
# divert all packets coming to en1 to NAT
${fwcmd} add nat 1 ip from any to any via en1
${fwcmd} add allow all from any to any

Where fxp0 is interface that connects remote mac and iTach unit, and en1 interface that connects our mac and remote mac.

Can't ping iTach from my mac. What's wrong in my configurations, and what should I do additionally to get access to the device?

share|improve this question
Do you have a question? – John Gardeniers Aug 11 '10 at 12:14
isnt 169.254.x.x the APIPA? why is it in use? – JamesK Aug 11 '10 at 13:00

You need to set up the mac at the far end to route traffic from the vpn to it's network as well. (known as bridged VPN) I'm not sure how you do that on a mac but it should be vaguely similar to this

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.