Thanks for your fast answer Peter,<br><br>you are right, all that configuration must be set to forward packets. I had already set it.<br><br>I have now my environtment working. I missed this line in my configuration:<br><br>
leftsubnet=vhost:%no,%priv<br><br>Now packets are forwarding well. I don't know why yet, I need more reading.<br><br>I hope it could help any other.<br><br>Carles.<br><br><div class="gmail_quote">2008/6/2 Peter McGill <<a href="mailto:petermcgill@goco.net">petermcgill@goco.net</a>>:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Carles,<br>
<br>
I can think of several causes.<br>
1) You do not have forwarding enabled in your kernel.<br>
cat /proc/sys/net/ipv4/ip_forward Should show 1<br>
Else add the following to your startup scripts:<br>
echo "1" > /proc/sys/net/ipv4/ip_forward<br>
2) Your blocking traffic with your firewall.<br>
Check that you allow the tunneled IPSec traffic.<br>
iptables -t filter -L -n -v<br>
iptables -t nat -L -n -v<br>
iptables -t mangle -L -n -v<br>
iptables -t raw -L -n -v<br>
3) You didn't include your lan subnet's in the conn.<br>
cat /etc/ipsec.conf (You may hide your key info.)<br>
<br>
If you don't see the problem with what I've suggested,<br>
the quickest/easiest way to solve would be to send an<br>
ipsec barf > ipsec_barf.txt attached in reply.<br>
If you send a barf don't bother with the other info,<br>
it's all included in the barf. Barfs include a lot of<br>
significant ipsec and networking information to debug.<br>
FYI, barfs do include your ip addresses, but do not<br>
include your keys, so you may wish to send only to<br>
those requesting rather than the whole list.<br>
The list members may also appreciate not receiving<br>
the large files...<br>
<br>
<br>
Peter McGill<br>
IT Systems Analyst<br>
Gra Ham Energy Limited<br>
<br>
<br>
<br>
<br>
________________________________<br>
<br>
From: <a href="mailto:users-bounces@openswan.org">users-bounces@openswan.org</a> [mailto:<a href="mailto:users-bounces@openswan.org">users-bounces@openswan.org</a>] On Behalf Of Carles Bonfill<br>
Sent: June 2, 2008 9:12 AM<br>
To: <a href="mailto:users@openswan.org">users@openswan.org</a><br>
Subject: [Openswan Users] No packets forwarded in a stablished connection<br>
<div><div></div><div class="Wj3C7c"><br>
<br>
Hi all,<br>
<br>
i just configured a VPN connection with OpenSwan <a href="http://2.4.5." target="_blank">2.4.5.</a> My goal is have a gateway where multiple roadwarriors could connect.<br>
<br>
My openswan gateway is behind a router doing nat. I have successfully connect a vpn client (Greenbow) bahing another router<br>
doing nat, and the connection is established with apparentetly no errors in logs.<br>
<br>
When i try to ping from roadwarrior to any inside host, i got no responses. I tcpdumped ipsec interface, and i see the echo<br>
packet, but i can't see the same echo packed in the ethernet interface connected to the lan. So, i have a problem in the process of<br>
forwarding inside the openswan gateway.<br>
<br>
Any idea where is the mistake?<br>
<br>
Thanks in advance for any help.<br>
<br>
Carles.<br>
<br>
<br>
<br>
<br>
Carles<br>
<br>
<br>
<br>
</div></div></blockquote></div><br><br clear="all"><br>-- <br>Carles Bonfill Asperó<br><br>Enginyer Superior de Telecomunicacions<br>Núm Col·legiat: 14763<br>Mòbil: +34 678 90 15 68<br>Email: <a href="mailto:carles@bonfill.com">carles@bonfill.com</a>