[Openswan Users] Problem in site 2 site communication

[Erich Titl]

Pascal

Pascal Fuks wrote:
> Hello,
> I do have a configuration with a centralsite (call it AS with public IP
> 4.2.3.226 on eth4 and 172.16.254.65 on eth5(public MPLS network)) that
> connect (without problem) to 6 sites.
> I’d like to have all sites communicating together, through central site
> tunnels
> Each site can communicate with the central site networks, but is not
> able to communicate with other sites.

Well, you only have a tunnel to the central site

> When tracerouting from distant site RUNGIS client to distant site IER,
> we see packets trying to go outside through the 4.2.3.226 (Public IP)
> address...
> Any idea / question are welcome ;-)

You need to either add a mesh of tunnels or a tunnel to a supernetwork
of the remote networks on each site.

Look at your routing table.

cheers

Erich



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3409 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.openswan.org/pipermail/users/attachments/20090827/57c4d87c/attachment.bin