[Openswan Users] SA establsihed, but no tunnel up and no route

[Paul Wouters]

On Fri, 20 Mar 2009, Wolfgang Rapp wrote:

> I checked the tunnel is up with "ip xfrm state & ip xfrm policy". The tunnel is up, but I cannot ping the server and get no response from the http server behind.
>
> is that a firewall problem?

Check firewall and ensure you're not NATing packets for IPsec.
Also run ipsec verify to see if there are any other warnings.

Paul