[Openswan Users] Can't reach hosts behind my VPN-Gateway

Sebastian Albrecht albrecht at irf.de
Mon Apr 19 16:29:07 CEST 2004


Paul Wouters wrote:
> It seems that the gateway to reach 10.0.18.60 is 10.0.0.1 on your
> network, and that the machine thinks it is LOCAL, thus it only
> does an arp for it on the local ethernet.

Now i'm confused. The VPN gateway 10.0.18.60 uses 10.0.0.1 as gateway 
for accessing the private network and the internet. The VPN client 
machine uses 192.168.0.1 (eth1 on the VPN gateway) as standard gateway 
for accessing evrything. The VPN gateway now has to forward all requests 
from the client to the private 10.0.0.0/8 network and back.

Now what prevents this routing table from doing so?
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use 
Iface
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 eth1
192.168.0.0     0.0.0.0         255.255.255.0   U     0      0        0 
ipsec1
10.0.0.0        10.0.0.1        255.0.0.0       UG    0      0        0 eth0
10.0.0.0        0.0.0.0         255.0.0.0       U     0      0        0 eth0
0.0.0.0         10.0.0.1        0.0.0.0         UG    0      0        0 eth0

regards, Sebastian.


More information about the Users mailing list