[Openswan Users] Routing Lans between 2 Machines.

Paul Wouters paul at xelerance.com
Tue May 12 13:42:36 EDT 2009


On Tue, 12 May 2009, Martin Rheumer wrote:

> The connection gets established all ok..
>
> 117 "nettonet" #4: STATE_QUICK_I1: initiate
> 004 "nettonet" #4: STATE_QUICK_I2: sent QI2, IPsec SA established tunnel
> mode {ESP=>0x35f19368 <0x4229fbff xfrm=AES_128-HMAC_SHA1 NATOA=none
> NATD=none DPD=none}
>
> But I get no routing or ability to traceroute etc.

You are likely NAT'ing the IPsec traffic by accident on one or both of
the gateways? Run ipsec verify for some sanity checks

Paul


More information about the Users mailing list