[Openswan Users] 2 ip ranges in our end with OpenSwan

[Paul Wouters]

On Wed, 3 Sep 2008, Indunil Jayasooriya wrote:

> Thanx for your help given out of compasion. I got it working successfully.
>
> I would like to give VPN setup configurations on my side.

Note that:

> # Controls IP packet forwarding
> #net.ipv4.ip_forward = 0

forwarding is off, but:

> conn tunnelipsec1
>        type=tunnel
>        left=1.2.3.4
>        leftsubnet=192.168.1.0/24
>        right=5.6.7.8
>        rightsubnet=196.4.49.0/24

You need forwarding for your subnet-subnet tunnel, and:

> [root at firewall ~]# ipsec verify

> Two or more interfaces found, checking IP forwarding            [OK]

forwarding is enabled.....

I think you might have manually enabled forwarding, and after a reboot,
your machine might not pick it up again properly.

Paul