[Openswan Users] Linux-Linux IPsec Tunnel ends at the gateway: no ping over the gateway in the next subnet

[Paul Wouters]

On Tue, 5 Jul 2005, foren titze wrote:

> Although I have make conn roadwarrior and roadwarrior-net my ping from the
> roadwarrior to the subnet behind the vpn-gateway doesn't go through.

>     nat_traversal=yes

>     #virtual_private=%v4:10.0.0.0/24,%v4:192.168.121.0/24

You must include virtual_private= for nat traversal. You must not include,
but exclude your leftsubnet= range.

> conn tit-linux-net
>     leftsubnet=192.168.121.0/24
>     also=titze-linux
>
> conn tit-linux
>     rightnexthop=192.168.121.1

It seems both left and right are in the same 192.168.121.0/24 subnet?????

Paul