<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Use the left/rightsourceip parameter in your conn and set it to your
server LAN IP. No need to set it for the remote end but you can if
you want to use identical conns at either end of the tunnel.<br>
<br>
<div class="moz-cite-prefix">On 03/07/2014 16:56, Neal Murphy wrote:<br>
</div>
<blockquote cite="mid:201407031156.17267.neal.p.murphy@alum.wpi.edu"
type="cite">
<pre wrap="">
On Thursday, July 03, 2014 08:44:16 AM Steven Tye wrote:
</pre>
<blockquote type="cite">
<pre wrap="">I may look into again later but no I cannot ping my clients. However, my
clients are able to access the targeted far server to send and receive
email so operationally the system is working.
Thanks for the assist.
-----Original Message-----
From: Nick Howitt [<a class="moz-txt-link-freetext" href="mailto:nick@howitts.co.uk">mailto:nick@howitts.co.uk</a>]
Sent: Thursday, July 3, 2014 4:02 AM
To: Steven Tye
Cc: <a class="moz-txt-link-abbreviated" href="mailto:users@lists.openswan.org">users@lists.openswan.org</a>
Subject: RE: [Openswan Users] Hub and Spoke issue
I'm not sure where you've left this. Are you able to ping your clients yet?
If not you may want to look at the nat part of the firewall (sudo iptables
-L -n -v -t nat), but this is really an OpenVPN question now.
</pre>
</blockquote>
<pre wrap="">
As an aside, I've found that packets' source address can matter when OpenSwan
runs on a system with more than one interface. Specifically, on such a server
I have to tell ping (and other programs) which address to use as the source
before OpenSwan will send the packets through the firewall.
_______________________________________________
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.openswan.org/mailman/listinfo/users">https://lists.openswan.org/mailman/listinfo/users</a>
Micropayments: <a class="moz-txt-link-freetext" href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a>
Building and Integrating Virtual Private Networks with Openswan:
<a class="moz-txt-link-freetext" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</pre>
</blockquote>
<br>
</body>
</html>