<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div>I’m setting up an OpenSWAN endpoint for remote workers. Our office network is 192.168.2.0/24 and some of our remote workers have the same network at home. I have xl2tp configured to hand out addresses in the 192.168.30.0/24 network. I don’t understand
what routes need to be in place.</div>
<div><br>
</div>
<div>
<div>root@vpn:~# cat /etc/xl2tpd/xl2tpd.conf</div>
<div>[global]</div>
<div> ipsec saref = yes</div>
<div> listen-addr = 192.168.2.248</div>
<div><br>
</div>
<div>[lns default]</div>
<div> ip range = 192.168.30.2-192.168.30.254</div>
<div> local ip = 192.168.30.1</div>
<div> refuse chap = yes</div>
<div> refuse pap = yes</div>
<div> require authentication = yes</div>
<div> ppp debug = yes</div>
<div> pppoptfile = /etc/ppp/options</div>
<div> length bit = yes</div>
</div>
<div><br>
</div>
<div>The tunnel is up:</div>
<div>
<div>000 #8: "L2TP-PSK-NAT"[5] 108.16.194.188:4500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_EXPIRE in 2954s; newest IPSEC; eroute owner; isakmp#7; idle; import:not set</div>
<div>000 #8: "L2TP-PSK-NAT"[5] 108.16.194.188 esp.b20af93@108.16.194.188 esp.d6803493@192.168.2.248 ref=0 refhim=4294901761</div>
</div>
<div><br>
</div>
<div>My remote IP is in the correct range:</div>
<div>
<div>mikes-mbp:~ mike$ ifconfig ppp0</div>
<div>ppp0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280</div>
<div><span class="Apple-tab-span" style="white-space:pre"></span>inet 192.168.30.2 --> 192.168.30.1 netmask 0xffffff00</div>
</div>
<div><br>
</div>
<div>I can ping the “virtual” endpoint (192.168.30.1) but nothing inside the 192.168.2.0/24 network. I know it’s a routing problem – throwing in the “virtual” network is confusing to me. What routes do I need to add to the server?</div>
<div><br>
</div>
<div>Mike</div>
<div>
<div>-- <br>
<table style="font-family:'Helvetica Neue', Helvetica, Arial, sans-serif; font-size: 14px; color:#939393; line-height:20px;" border="0">
<tbody>
<tr>
<td colspan="2" style="border-top-width:5px; border-top-style:solid; border-top-color:#EEE;">
</td>
</tr>
<tr>
<td style="padding-right:25px;">
<p><strong>Michael James</strong><br>
Sr. Network Engineer<br>
267-419-6400, x204<br>
mike.james@clutch.com </p>
</td>
<td style="border-left:solid; border-left-color:#EEE; border-left-width:2px; padding-left:25px; padding-right:25px;">
<img style="margin-bottom:10px;" src="http://www.clutch.com/assets/images/site/ClutchLogo.png" alt="Clutch" name="Clutch" id="Clutch" height="39" width="140"><br>
<span style="font-size:11px; font-style:italic; font-weight:bold; line-height:13px;">The Premiere loyalty, rewards, and gifting platform
<br>
for consumer-focused brands and retailers.</span></td>
</tr>
</tbody>
</table>
</div>
<br>
</div>
</body>
</html>