<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>RE: [Openswan Users] Openswan netkey</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Hi,<BR>
<BR>
You actually need to use iptables on the openswan box.<BR>
<BR>
You need a rule similar to the following<BR>
iptables -t nat -A POSTROUTING -s 192.168.1.0/24 ! -d 10.0.2.0/24 -j MASQUERADE<BR>
<BR>
otherwise packets will be masqueraded.<BR>
<BR>
Regards,<BR>
Randy<BR>
<BR>
<BR>
-----Original Message-----<BR>
From: users-bounces@openswan.org on behalf of Andris Lismanis<BR>
Sent: Wed 11/3/2010 10:36 AM<BR>
To: users@openswan.org<BR>
Subject: [Openswan Users] Openswan netkey<BR>
<BR>
Hi,<BR>
<BR>
I'm trying to setup Openswan IPsec VPN. My setup is NATed at both ends as following:<BR>
<BR>
<BR>
<BR>
192.168.1.0/24 lan ----- 192.168.1.200 (openswan)--adsl (nat-t)------internet------(nat-t)adsl----10.0.2.15(openswan) rw<BR>
<BR>
I have managed to succefully establish a tunnel between the NATed gateway and NATed roadwarrior. The problem I have is that I cannot ping each other or the subnet from rw. I don't use any iptables or any other firewall software on gateway. The only ports open on ADSL router are 500 and 4500 (UDP).<BR>
<BR>
I have searched around the google for various examples but haven't come across anything that works. Can someone please advice.<BR>
<BR>
<BR>
Thanks,<BR>
<BR>
Andris<BR>
<BR>
<BR>
</FONT>
</P>
</BODY>
</HTML>