[Openswan Users] IPSEC tunnel problem

[Paul Wouters]

On Tue, 25 Jan 2005, DurgaPrasad Adusumalli wrote:

> I have tried to set up an ipsec tunnel between two networks using
> openswan 2.1.5. As shown in the figure below.
>
> 10.0.1.0/24 -----172.16.1.1 ---- 172.16.1.2 ------ 10.0.20.0/24
> Left                  Left Gateway  Right Gateway    Right network.

> 000 #6: "yourtunnel" STATE_QUICK_R2 (IPsec SA established);

> When I try to ping left client to right client I get Destination Host
> unreachable error. Its the same with telnet and ssh also. Can someone
> help me please. I have set ip_forward to 1 on both gateways.

If you are really testing from the subnets and not the gateways, then perhaps
the machines in the subnet do not have the ipsec gateways as their default gateway?

Perhaps the gateways firewall? NAT ?

Paul
-- 

"At best it is a theory, at worst a fantasy" -- Michael Crichton