Well I don't know why but in my first post, is some test is missing<br>so, I'm going to paste here again, sorry:<br><br><div><blockquote class="gmail_quote" style="margin-top: 0; margin-right: 0; margin-bottom: 0; margin-left: 0; margin-left: 0.80ex; border-left-color: #cccccc; border-left-width: 1px; border-left-style: solid; padding-left: 1ex">
<div><span class="e" id="q_111b354ab6eac8c4_0"> ...<br> Ok, well so with this escenary working having a look to /var/log/auth.log I can see how the tunnel is stablished between the two boxes, the first phase is succesful and the second is succesful too. And once stablished I made the first test, pinging from
<a href="http://10.1.2.3" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">10.1.2.3</a> to <a href="http://192.168.1.1" target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">192.168.1.1
</a><br></span></div></blockquote></div><br>it continues like this: <br><br>Well so now I can see (via tcpdump) the esp packets leaving the left box, and I can see them (via tcpdump also) arriving to the right box, and if I made a tcpdump to the lan interface now I can see clearly the packets without the encryption, that is a icmp echo request from
<a href="http://10.1.2.3">10.1.2.3</a> to <a href="http://192.168.1.1">192.168.1.1</a> and a icmp echo reply from <a href="http://192.168.1.1">192.168.1.1</a> to <a href="http://10.1.2.3">10.1.2.3</a>. But if I follow now the icmp echo response, I can see it arriving to the right box but then it dissapears... I have tried to make directly a ping from the right subnet and the same result ( I have tested also pinging from the right subnet to an unknown ip, and I can follow through the right box and see them in the left box).
<br><br>Which should be my next move?<br><br>Thanks to all<br><br>