Hi,

I’m not sure if this is an openswan or iptables issue, but just in case
I’ll ask.

My peer is a Linux 2.6 running openswan with public ip.

My internal network is 10.1.1.0/24 but the client wants me to nat it
using 192.168.50.51

I’m trying to connect to a client who uses Cisco concentrator behind NAT
(192.168.65.10).

 

The connection works fine. On both sides we see the tunnel up. The only
problem is that no traffic is going through.

Using tcpdump I see that the traffic is not being encrypted. It’s going
through my external interface (eth1) but it’s not going throught the
tunnel.

 

Is there a way that instead of using iptables POSTROUTING to nat my
private network, to use something else?

 

 

This is my config:

conn tw2

        type=tunnel

        authby=secret

        right=mypublicip

        rightnexthop=myrouter

        auto=start

        left=client’spublicip

        leftid=192.168.65.10

        leftsubnet=ip I’m trying to hit/32

        pfs=no

        keyingtries=0

        keyexchange=ike

        auth=esp

        keylife=1440m

        esp=3des-md5

        ike=3des-md5

        rightsubnet=192.168.50.51/32

 

 


