Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We are developing app for device named iTach WF2IR, but we doesn't actually have that device, we will get one in 4 weeks or so. Meanwhile, we should make demo for that device in a week. So we decided to connect through VPN to the remote mac connected to that device, located abroad, and then connect to device through that mac.

We connected remote mac to our VPN server (got IP 172.17.x.x), and also connected that mac to Wi-Fi network created by device. Device has static IP 169.254.1.70, and it gave remote mac DHCP-generated IP in the same network.

Also I connected my mac to the same VPN, and performed following:

route add 169.254.1.0/24 172.17.x.x

Where 172.17.x.x is remote mac IP, so we could access to the device through remote mac.

On the remote mac we have configured firewall to bypass connections:

#!/bin/sh
fwcmd="/sbin/ipfw"
# Force a flushing of the current rules before we reload.
$fwcmd -f flush
# pass all through loopback device
${fwcmd} add pass all from any to any via lo
${fwcmd} add pass all from any to any via en1
${fwcmd} add pass all from any to any via fxp0
${fwcmd} add allow all from any to 127.0.0.0/8
${fwcmd} add allow all from 127.0.0.0/8 to any
${fwcmd} nat 1 config  if $en1 reset deny_in redirect_port  tcp 169.254.1.70:80 80
# divert all packets coming to en1 to NAT
${fwcmd} add nat 1 ip from any to any via en1
${fwcmd} add allow all from any to any

Where fxp0 is interface that connects remote mac and iTach unit, and en1 interface that connects our mac and remote mac.

Can't ping iTach from my mac. What's wrong in my configurations, and what should I do additionally to get access to the device?

share|improve this question
    
Do you have a question? –  John Gardeniers Aug 11 '10 at 12:14
    
isnt 169.254.x.x the APIPA? why is it in use? –  JamesK Aug 11 '10 at 13:00
add comment

1 Answer

You need to set up the mac at the far end to route traffic from the vpn to it's network as well. (known as bridged VPN) I'm not sure how you do that on a mac but it should be vaguely similar to this https://help.ubuntu.com/community/OpenVPN

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.