<div dir="ltr">>> Secondly, I have tried to route traffic to 172.2.2.2(remote encyrpted
domain IP) through my virtual interface(local encrypted domain IP)
10.5.5.5. Still its no use.<br><br>by adding route add -host 172.2.2.2 gw 10.5.5.5 manually;<br><br>Regards,<br><br><br><div class="gmail_quote">On Fri, Dec 24, 2010 at 1:44 PM, Hammad <span dir="ltr"><<a href="mailto:raohammad@gmail.com">raohammad@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;"><div dir="ltr">in ipsec.conf; nat_traversal=yes; I think there is nothin more than this in provisioning openswan for NAT. Secondly, I have tried to route traffic to 172.2.2.2(remote encyrpted domain IP) through my virtual interface(local encrypted domain IP) 10.5.5.5. Still its no use.<br>
<br>I have enabled /etc/sysctl.conf -> net.ipv4.ip_forward = 1 <br><br>what else?<br><br>Here is quite a disappointing post; but we cant let openswan die in EC2 environment so it should be resolved.<br><a href="http://serverfault.com/questions/144114/ipsec-tunnel-to-amazon-ec2-netkey-nat-and-routing-problem" target="_blank">http://serverfault.com/questions/144114/ipsec-tunnel-to-amazon-ec2-netkey-nat-and-routing-problem</a><br>
<br>...<br><font color="#888888">Hammad</font><div><div></div><div class="h5"><br><br><div class="gmail_quote">On Fri, Dec 24, 2010 at 4:13 AM, Neal Murphy <span dir="ltr"><<a href="mailto:neal.p.murphy@alum.wpi.edu" target="_blank">neal.p.murphy@alum.wpi.edu</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div>On Thursday 23 December 2010 13:38:40 Hammad wrote:<br>
> Hi Piavlo,<br>
><br>
> Its a virtual interface. I created with;<br>
><br>
> ifconfig eth0:0 *10.5.5.5* netmask 255.255.255.255 broadcast 10.5.5.255<br>
><br>
> I have already used this scheme with OpenSWAN and virtual interface created<br>
> this way. But in that case, my public IP was on interface eth0. But here on<br>
> EC2, I see a new IP 10.254.254.254...<br>
<br>
</div>That's a private IP address. You seem to have a NAT device in there. Have you<br>
taken the necessary steps to 'work around' the NAT? Or are you expecting to<br>
use a publicly routable IP address?<br>
<div><div></div><div><br>
N<br>
_______________________________________________<br>
<a href="mailto:Users@openswan.org" target="_blank">Users@openswan.org</a><br>
<a href="http://lists.openswan.org/mailman/listinfo/users" target="_blank">http://lists.openswan.org/mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
</div></div></blockquote></div><br></div></div></div>
</blockquote></div><br></div>