Troubleshooting Tips - Novell OPEN WORKGROUP SUITE SMALL BUSINESS EDITION 9.3 - INSTALLATION AND ADMINISTRATION GUIDE 10-2007 Administration Manual

For most networks with more than a single subnet, or where Server A and Server B are not the
default gateway for clients on their networks, you also need to set up routing on internal switches
and routers so that clients on Network A know to point to Server A as the next hop to Network B.
This also needs to be done so that clients on Network B know to point to Server B as the next hop to
Network A.
WARNING: This involves modifying systems beyond the NOWS SBE servers and can break the
network if performed incorrectly. You are on your own at this point.

14.4.3 Troubleshooting Tips

82 Novell Open Workgroup Suite Small Business Edition 9.3 Administration and Installation Guide
To verify the validity of the certificates on the VPN, issue the following command:
openssl verify-<keyname>ca.crt-purpose sslclient <keyname>.crt
Step 7 on page 81 suggests commenting out the public push statements for the VPN. If this is
not done and the VPN servers are on the same network segment, the servers will hang. Pushing
the public route can also cause trouble communicating over the VPN tunnel.
Uninstalling the Firewall (IPTables) component does not undo any firewall configuration
changes that have been made. Changes to the firewall configuration can cause the Site-to-Site
VPN to stop functioning, so make firewall changes with care.
To verify the firewall configuration, follow these directions:
1. In a text editor, open /etc/sysconfig/SuSEfirewall2
2. Find the line beginning with FW_DEV_INT
3. Verify that it looks like this:
FW_DEV_INT="eth1 tun0 tun1 tun2 tun3 tun4 tun5 tun6 tun7 tun8
tun9