[Openswan Users]
can't ping from subnet to subnet (isakmpd===ipsec, with PSK's)
foren titze
freeswan at gmx.net
Tue Jan 27 09:32:09 CET 2004
hello users,
i have an connection between established, so that IPsec SA established on the
ipsec side emerges. but i can't ping in the subnets behind the gateways.
my route on the ipsec server:
---
Destination Gateway Genmask Flags Metric Ref Use Iface
62.96.119.128 * 255.255.255.224 U 0 0 0 eth0
62.96.119.128 * 255.255.255.224 U 0 0 0 ipsec0
192.168.0.0 62.96.119.129 255.255.255.0 UG 0 0 0 ipsec0
192.168.110.0 gate2.sys 255.255.255.0 UG 0 0 0 eth1
localnet * 255.255.255.0 U 0 0 0 eth1
default 62.96.119.129 0.0.0.0 UG 0 0 0 eth0
---
my route on the isakmpd client:
---
213.11.144.0 * 255.255.255.192 U 0 0 0 eth0
192.168.0.0 * 255.255.255.0 U 0 0 0 eth1
localnet * 255.255.255.0 U 0 0 0 eth0
default shellfish 0.0.0.0 UG 0 0 0 eth0
---
the subnets are listed in the ipsec.conf and isakmpd.conf.
my ipsec.conf:
---
config setup
interfaces=%defaultroute
klipsdebug=none
plutodebug=none
uniqueids=yes
plutoload=%search
plutostart=%search
#overridemtu=1000
conn %default
keyingtries=1
conn testing-sub
also=testing
leftsubnet=192.168.121.0/24
rightsubnet=192.168.0.0/24
conn testing
#esp=aes256-sha1
#ike=blowfish128-sha
auto=add
auth=esp
pfs=yes
authby=secret
right=213.11.144.34
#leftfirewall=no
#rightfirewall=no
rightnexthop=213.11.144.1
left=62.96.119.156
leftnexthop=%defaultroute
---
and my isakmpd.conf:
[General]
Listen-on= 213.11.144.34
[Phase 1]
62.96.119.156= ISAKMP-vpn-server-test
[Phase 2]
Connections= testing
[ISAKMP-vpn-server-test]
Phase= 1
Transport= udp
Address= 62.96.119.156
Local-address= 213.11.44.34
Configuration= Default-main-mode
Authentication= test222
[testing]
Phase= 2
ISAKMP-peer= ISAKMP-vpn-server-test
Configuration= Default-quick-mode
Local-ID= Net-east
Remote-ID= Net-west
#Local-ID
[Net-west]
ID-type= IPV4_ADDR_SUBNET
Network= 192.168.121.0
Netmask= 255.255.255.0
[Net-east]
ID-type= IPV4_ADDR_SUBNET
Network= 192.168.0.0
Netmask= 255.255.255.0
#######################
#Main mode description
########################
...
thanks a lot!!
More information about the Users
mailing list