Wifi Problem

[Thomas Beer]

Dear All,

I try to connect a laptop (XP) with a FBSD router. If I use only
WEP encryption it works not well but it works. If I apply
IPSec it works miserable but ICMP will not reach any
host. Topology:

-------------------------------------------------------------------------------
     |                                                          |
192.168.2.2 (Wifi)                            192.168.2.8 (XP Client)
192.168.1.2 (Norm. Ethernet)


This tcpdump is without IPSec but WEP encrypted. Please not
the packet loss of 72%:

ping ibm.mobile
PING ibm.mobile (192.168.2.8): 56 data bytes
36 bytes from amd.newworld (192.168.1.2): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
4  5  00 5400 8c48   0 0000  01  01 a906 192.168.1.2  192.168.2.8

36 bytes from amd.newworld (192.168.1.2): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
4  5  00 5400 da0b   0 0000  01  01 5b43 192.168.1.2  192.168.2.8

36 bytes from amd.newworld (192.168.1.2): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
4  5  00 5400 8a64   0 0000  01  01 aaea 192.168.1.2  192.168.2.8

36 bytes from amd.newworld (192.168.1.2): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
4  5  00 5400 9476   0 0000  01  01 a0d8 192.168.1.2  192.168.2.8

36 bytes from amd.newworld (192.168.1.2): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
4  5  00 5400 3e51   0 0000  01  01 f6fd 192.168.1.2  192.168.2.8

<--- snip --->

36 bytes from amd.newworld (192.168.1.2): Time to live exceeded
Vr HL TOS  Len   ID Flg  off TTL Pro  cks      Src      Dst
4  5  00 5400 30fd   0 0000  01  01 0452 192.168.1.2  192.168.2.8

64 bytes from 192.168.2.8: icmp_seq=51 ttl=128 time=3.109 ms
64 bytes from 192.168.2.8: icmp_seq=52 ttl=128 time=2.609 ms
64 bytes from 192.168.2.8: icmp_seq=53 ttl=128 time=2.371 ms
64 bytes from 192.168.2.8: icmp_seq=54 ttl=128 time=2.617 ms
64 bytes from 192.168.2.8: icmp_seq=55 ttl=128 time=2.505 ms
64 bytes from 192.168.2.8: icmp_seq=56 ttl=128 time=2.422 ms
64 bytes from 192.168.2.8: icmp_seq=57 ttl=128 time=2.801 ms
64 bytes from 192.168.2.8: icmp_seq=58 ttl=128 time=2.956 ms
64 bytes from 192.168.2.8: icmp_seq=59 ttl=128 time=2.583 ms

<--- snip ---->

64 bytes from 192.168.2.8: icmp_seq=182 ttl=128 time=3.619 ms
64 bytes from 192.168.2.8: icmp_seq=189 ttl=128 time=2.832 ms
64 bytes from 192.168.2.8: icmp_seq=196 ttl=128 time=3.230 ms
64 bytes from 192.168.2.8: icmp_seq=197 ttl=128 time=12.565 ms
64 bytes from 192.168.2.8: icmp_seq=204 ttl=128 time=7.226 ms
64 bytes from 192.168.2.8: icmp_seq=211 ttl=128 time=2.635 ms
64 bytes from 192.168.2.8: icmp_seq=212 ttl=128 time=16.048 ms
64 bytes from 192.168.2.8: icmp_seq=218 ttl=128 time=2.444 ms
64 bytes from 192.168.2.8: icmp_seq=219 ttl=128 time=10.598 ms
64 bytes from 192.168.2.8: icmp_seq=226 ttl=128 time=7.372 ms
64 bytes from 192.168.2.8: icmp_seq=239 ttl=128 time=2.806 ms
64 bytes from 192.168.2.8: icmp_seq=240 ttl=128 time=2.747 ms
64 bytes from 192.168.2.8: icmp_seq=241 ttl=128 time=11.169 ms
64 bytes from 192.168.2.8: icmp_seq=248 ttl=128 time=5.883 ms
^C
--- ibm.mobile ping statistics ---
253 packets transmitted, 69 packets received, 72% packet loss
round-trip min/avg/max/stddev = 2.332/4.867/18.501/3.889 ms

I changed the MTU on both cards to 1420 with no avail. 
Pinging from the XP Client to FBSD works smoothly. 
Overall connectivity is fine.

What could be the (routing) problem, how to solve it?

Cheers Tom