[Openswan Users] Can't reach hosts behind my VPN-Gateway

Nate Carlson natecars at natecarlson.com
Thu Apr 15 12:42:25 CEST 2004


On Thu, 15 Apr 2004, Sebastian Albrecht wrote:
> First of all, thanks for your help, Nate. I changed the network settings
> on the wireless side. Now the whole network constellation looks like
> this:

*snip* looks better. From your config, you're only configuring ipsec1, not 
ipsec0 - is that your intent?

> With this config the SA is established and i can ping 192.168.0.1. But
> still i can't ping any host in the private LAN 10.0.0.0/8. Even not the
> 10.0.18.60 on eth0. tcpdump on eth1 shows me the encrypted packets when
> pinging 192.168.0.1.  When pinging 10.0.18.60, no encrypted packets are
> shown.

That's very odd - you'd expect to at least see packets coming in. You get 
nothing at all, or they just aren't encrypted?

------------------------------------------------------------------------
| nate carlson | natecars at natecarlson.com | http://www.natecarlson.com |
|       depriving some poor village of its idiot since 1981            |
------------------------------------------------------------------------


More information about the Users mailing list