[Openswan Users] routing issues with netkey

Jacco Kok jacco at 0xcafebabe.nl
Mon Mar 10 12:30:24 EDT 2008

LS, has anyone come across routing problems with the netkey implemetation
under fedora? I use fc7 with kernel and

The setup is a host-to-network vpn between the host and the gateway are 2
natting devices:
    | gw
NAT ( <->
NAT ( <->
    | host

I've setup the vpn using X509 certificates and the log says the vpn is
established. However ip xfrm policy show tells that the vpn is between and _updown also added a route to

When sending traffic to from the I see indeed
ESP traffic to the host but the host never answers because the address of
the unpacked packets is and not

I tried to set the policy by hand and it looks ok but does not work. Can
anyone shed some light on how openswan/netkey handles routing and how to
get this setup going?


Try to relax and enjoy the crisis.
                -- Ashleigh Brilliant

Jacco Kok

More information about the Users mailing list