[Openswan Users] linux 2.6 remote network routes ??

[Colin Johnston]

Dear all,
After some help on the irc channel I managed to get vpn client > gateway
remote lan ip working ok. However ...

client is mac osx vpn tracker.                      195.248.116.90
Server is linux 2.6        ipsec auto 2.2.0dr2      212.219.11.97

see below ipsec.conf on server
version 2.0
config setup
        interfaces="ipsec0=eth1"
        # Debug-logging controls:  "none" for (almost) none, "all" for lots.
        klipsdebug=none
        plutodebug="control parsing"
include /etc/ipsec.d/examples/no_oe.conf
conn road 
        type=passthrough
        authby=secret
        pfs=no 
        left=195.248.116.90
        right=212.219.11.97
        rightsubnet=212.219.10.128/25
        rightnexthop=212.219.11.102
        auto=add

The problem is the following,  once the VPN is live i can ping
212.219.10.135 (which is the remote wan side of the vpn server) from
195.248.116.90 osx client.
A static host route is automatically added on gateway
195.248.116.90  212.219.11.102  255.255.255.255 UGH       0 0          0
eth1

However this(212.219.10.135) is the only host I can ping on the
212.219.10.128/25 lan and hence office machines cannot be contacted etc.

Any idea what is wrong ??


Thanks in advance

Colin Johnston