[Openswan Users] We can NOT ping from the firewall, But can ping from LAN Pcs.

Ruben Laban r.laban at ism.nl
Mon Dec 8 06:45:38 EST 2008


On Monday 08 December 2008 at 11:47 (CET), Indunil Jayasooriya wrote:
> Hi All,
>
> I am running OpenSwan on Centos 5x . It works fine. All the Pcs behind
> LAN can ping all the destinations @ the rempte sites.
> Firewall where OpenSwan running can NOT ping all the destinations @
> the rempte sites.
>
> Could you pls let me know why?

In your openswan connection definitions you need to use 
left/rightsource=internal.ip.of.firewall, so that the firewall communicates 
to the remote end using an ip thats within your left/rightsubnet definition.

HTH.

Regards,
Ruben


More information about the Users mailing list