<HTML><HEAD>
<STYLE id=eMClientCss>blockquote.cite { margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc }
blockquote.cite2 {margin-left: 5px; margin-right: 0px; padding-left: 10px; padding-right:0px; border-left: 1px solid #cccccc; margin-top: 3px; padding-top: 0px; }
.plain pre, .plain tt { font-family: monospace; font-size: 100%; font-weight: normal; font-style: normal; }
a img { border: 0px; }body {font-family: Tahoma;font-size: 12pt;}
.plain pre, .plain tt {font-family: Tahoma;font-size: 12pt;}
<![CDATA[BLOCKQUOTE.cite {
PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px
}
BLOCKQUOTE.cite2 {
PADDING-TOP: 0px; PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; MARGIN-TOP: 3px; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px
}
.plain PRE {
FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal
}
.plain TT {
FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal
}
A IMG {
BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px
}
#x68bec1acef484c7ab52f11a6e6ece67c {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
.plain PRE {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
.plain TT {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
BODY {
FONT-SIZE: 12pt; FONT-FAMILY: Tahoma
}
]]></STYLE>
<STYLE>#xa8a56da56ac047129d9d603492cea9a6 BLOCKQUOTE.cite2
{PADDING-TOP: 0px; PADDING-LEFT: 10px; MARGIN-LEFT: 5px; BORDER-LEFT: #cccccc 1px solid; MARGIN-TOP: 3px; PADDING-RIGHT: 0px; MARGIN-RIGHT: 0px}
#xa8a56da56ac047129d9d603492cea9a6 .plain PRE, #xa8a56da56ac047129d9d603492cea9a6 .plain TT
{FONT-SIZE: 100%; FONT-FAMILY: monospace; FONT-WEIGHT: normal; FONT-STYLE: normal}
#xa8a56da56ac047129d9d603492cea9a6 A IMG
{BORDER-TOP: 0px; BORDER-RIGHT: 0px; BORDER-BOTTOM: 0px; BORDER-LEFT: 0px}
#xa8a56da56ac047129d9d603492cea9a6 #x68bec1acef484c7ab52f11a6e6ece67c, #xa8a56da56ac047129d9d603492cea9a6 .plain PRE, #xa8a56da56ac047129d9d603492cea9a6 .plain TT, #xa8a56da56ac047129d9d603492cea9a6
{FONT-SIZE: 12pt; FONT-FAMILY: Tahoma}
</STYLE>
</HEAD>
<BODY scroll=auto bgColor=#ffffff class>
<DIV> </DIV>
<DIV>On 24/01/2015 2:46:17 PM, "Nick Howitt" <<A href="mailto:nick@howitts.co.uk">nick@howitts.co.uk</A>> wrote:</DIV>
<DIV> </DIV>
<DIV id=xa8a56da56ac047129d9d603492cea9a6 style="COLOR: #000000">
<BLOCKQUOTE class=cite2 cite=54C39419.6030109@howitts.co.uk type="cite">Can you give your network config as I don't understand it from this in your logs:<BR>
<BLOCKQUOTE><TT>000 "tunnel1": 192.168.0.0/24===192.168.0.2<192.168.0.2>[LEFT_PUBLIC_IP,+S=C]---192.168.0.1...192.168.0.1---RIGHT_PUBLIC_IP<RIGHT_PUBLIC_IP>[+S=C]===192.168.10.0/24; prospective erouted; eroute owner: #0</TT><BR></BLOCKQUOTE><BR>To me it is indicating your left and right public IP's have a common gateway of 192.168.0.1 which does not make sense if you are declaring public IP's for left and right.<BR></BLOCKQUOTE>
<DIV>My Debian box running IPSec is using only private IPs working as a sort of a DMZ for my LAN. The Debian then has a point-to-point with a Cisco router that has a public IP, to the internet. We are supposed to have a site-to-site connection with the provider's IPSec network which is sitting on a Microsoft Windows 2008R2 which is using Microsoft Forefront (TMG) 2008. I will try and put a diagram below then explain it:</DIV>
<DIV> </DIV>
<DIV> </DIV>
<DIV><lan> <==>(LPLIP) <Debian IPSec>(LPTP2) <==> (LPTP1) <Cisco Router>(LPI) <==> {{INTERNET}} <==> (RPI)<MS Win2008R2 Server>(RPLI) <==><lan></DIV>
<DIV> </DIV>
<DIV>Left Side</DIV>
<DIV>LPLI - Left Private LAN Interface on the Debian Server facing the primary LAN for the network 103.1.0.0/24</DIV>
<DIV>LPTP1 - Left point to point IP - 192.168.0.2 [This is the Debian box running Openswan IPSec on NAT] facing the Cisco Router</DIV>
<DIV>LPTP2 - Left point to point IP - 192.168.0.1 [This is the gw to the internet - Cisco Router]</DIV>
<DIV>LPI - Left public IP (This is sitting on the Cisco Router acting as the border out to the internet]</DIV>
<DIV> </DIV>
<DIV>Right Side</DIV>
<DIV>RPI - Right Public IP also gateway to the internet. This is sitting on the Microsoft Windows 2008R2 Server with MS Forefront TMG 2008</DIV>
<DIV>RPLI - Right Private LAN interface for the network 192.168.10.0/24</DIV>
<DIV> </DIV>
<DIV>I hope this answers your questions. Many thanks for your help,</DIV>
<DIV> </DIV>
<DIV>MPN.</DIV>
<BLOCKQUOTE class=cite2 cite=54C39419.6030109@howitts.co.uk type="cite"> </BLOCKQUOTE></DIV></BODY></HTML>