[Openswan Users] Host to net VPN question
gtm at highstreetnetworks.com
Wed Mar 30 13:00:03 CEST 2005
I followed that tutorial as close to the letter as I could. I am not using a
kernel that has the NAT-T patch. Altough I shouldn't need it because I am not
behind a firewall for my current tests.
I make the connection to the ipsec gateway using certificates. I can ping the
internal interface of the ipsec gateway (I did turn forwarding on in the kernel)
and get a response. If I ping another box on the internal network I get no
response. I did run tcpdump on the box I am trying to ping, I see the ping come
in and the pong go out. The problem (I think) is that when the ping comes in it
has a public address so when any internal box tries to respond the response goes
out its default gateway (not the ipsec gateway) trying to get there.
I am lost. What are my options...
Quoting Jacco de Leeuw <jacco2 at dds.nl>:
> Glenn MacGregor wrote:
> > I have been looking around for a week or so on how to create a host-to-net
> > connection from a windows XP box to an openswan box.
> > Forgive me but I very confused. I can make the connection from the winxp
> > using the free ipsec tool. I can ping the internal interface of the vpn box
> > can get no futher.
> This is a normal configuration so it should work. Did you follow Nate
> Carlson's howto to the letter?
> > What is the prefered method to handle this connection? Is it to use l2tp or
> > I do something with iptables using NAT or something.
> L2TP is *not* required.
> Jacco de Leeuw mailto:jacco2 at dds.nl
> Zaandam, The Netherlands http://www.jacco2.dds.nl
This mail sent through IMP: http://horde.org/imp/
More information about the Users