[Openswan Users] vpn connection to a LANCOM router

[Paul Wouters]

On Sun, 8 Jan 2006, Andreas Lüdtke wrote:

>
> I found the problem on the LANCOM side: it was an entry in the icmp-polling table. Now I
> have a vpn connection between the two router, but I can't send any data over it. Even a
> ping from the Openswan router to the lancom router doesn't work. I checked the firewall on
> the Lancom and it says me that no packets are dropped when I try to ping.
>
> The route command gives me a reasonable output:
>
> Kernel IP routing table
> Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
> 217.0.116.103   *               255.255.255.255 UH    0      0        0 ppp0
> 217.0.116.103   *               255.255.255.255 UH    0      0        0 ipsec0
> 10.11.12.0      217.0.116.103   255.255.255.0   UG    0      0        0 ipsec0
> 10.7.7.0        *               255.255.255.0   U     0      0        0 br0
> default         217.0.116.103   0.0.0.0         UG    0      0        0 ppp0
>
> ipsec eroute
> 0          10.7.7.0/24        -> 10.11.12.0/24      => tun0x1002 at 123.45.67.89
>
> Do I need to modify the iptables to get it working? If yes, could you please give me an
> example? I've never dealt with it.

No you shouldn't need that. Run ipsec verify and/or disable all firewall/NAT rules to
see if those are causing your problems.

Paul