Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I typically keep a few IPSec VPN connections open, using IPSecuritas. But when I turn on my Mac's Internet Sharing feature, to share my Ethernet connection over wi-fi, some of these stop working.

It doesn't happen 100% of the time, but it stops working as soon as I turn Internet Sharing on, and starts as soon as I turn it off. I'm testing this by pinging a host that's in the VPN's network, and watching when it becomes unreachable.

The Internet Sharing feature assigns IPs in the 10.0.2.x range. As far as I know, this range isn't being used by IPSecuritas. For example, one host that I can no longer reach is in the 10.13.x.x range.

I'm running OS 10.7.4, connected to the Internet via a cable modem and router. The router, a WRT110, has IPSec Passthrough enabled.

Any suggestions on how I can debug this?

share|improve this question
It seems like a desirable security feature for a vpn client, to deny you from giving access to the VPN to other computers without authentication. Since you say it is happening intermittently, it may be buggy or it may be something else. – Bruno9779 Jun 13 '12 at 1:59
Do you have the subnets on the two networks? Do they overlap? – Robert Jun 15 '12 at 16:34
The subnet of my Internet connection (over Ethernet) is For one of the VPN connections that gets interrupted, it's For Internet Sharing over wi-fi, I believe it uses and, although I'm not positive about that. So it doesn't seem like they should overlap. – JW. Jun 15 '12 at 16:49
Maybe make note of the output of the route command while working and while broken and look for differences. – Robert Jun 15 '12 at 16:58
It might also have something to do with the order that connections get turned on because the VPN will be pushing route commands to your machine. Maybe if its VPN then Internet Sharing then IS will over write the pushed VPN routes. While IS first then VPN would make sure that the VPN routes don't get over written. – Robert Jun 15 '12 at 17:00

You must log in to answer this question.

Browse other questions tagged .