[Openswan Users] Connecting to other machines in subnet

Willie Gillespie wgillespie+openswan at es2eng.com
Tue Feb 12 00:43:56 EST 2013


On 02/11/2013 05:59 PM, Durwin wrote:
> Here is my config.  My right and left are opposite of yours but it looks
> the same other wise.
>
> conn siteB
>      left=%defaultroute
>      leftsubnet=192.168.4.0/24
>      leftsourceip=192.168.4.100
>      right=public ip of hardware vpn
>      rightsubnet=172.23.93.0/24
>      type=tunnel
>      authby=secret
>      keyexchange=ike
>      auto=start
>      pfs=yes
>      ike=3des-sha1-modp1024
>      esp=3des-sha1
>
> I configured machine C to use machine B as gateway.  I confirmed
> forwarding is on (server B).  But I can't connect to machine C from site
> A.  What else am I missing?

Okay, with that let's look at Daniel Cave's suggestion now.  What 
iptables rules do you have on server B?  Anything that might be blocking 
it from forwarding?
iptables -L -n -t nat
iptables -L -n -t filter


More information about the Users mailing list