[Openswan Users] 2 ip ranges in our end with OpenSwan

Paul Wouters paul at xelerance.com
Wed Sep 3 09:40:09 EDT 2008

On Wed, 3 Sep 2008, Indunil Jayasooriya wrote:

> Thanx for your help given out of compasion. I got it working successfully.
> I would like to give VPN setup configurations on my side.

Note that:

> # Controls IP packet forwarding
> #net.ipv4.ip_forward = 0

forwarding is off, but:

> conn tunnelipsec1
>        type=tunnel
>        left=
>        leftsubnet=
>        right=
>        rightsubnet=

You need forwarding for your subnet-subnet tunnel, and:

> [root at firewall ~]# ipsec verify

> Two or more interfaces found, checking IP forwarding            [OK]

forwarding is enabled.....

I think you might have manually enabled forwarding, and after a reboot,
your machine might not pick it up again properly.


More information about the Users mailing list