[Openswan Users] IPSEC Netkey routing

Bob Miller bob at computerisms.ca
Wed Mar 20 02:24:20 UTC 2013


You can try the right/leftsourceip setting in your ipsec.conf, I think
that will do what you are after...
-- 
Computerisms
Bob Miller      
867-334-7117 / 867-633-3760
http://computerisms.ca


On Tue, 2013-03-19 at 21:54 +0000, Johnny Minty (Liverton) wrote:
> Hello there,
> 
> I am using open swan with netkey and I have an issue with routing from
> local interfaces across the tunnel.
> 
> Here is the setup I am using : 
> 
> SITE 1:
>   eth0: external addr 
> 
>   eth1: 192.168.6.254 (network 192.168.6.0/24)
> 
>   PC1: 192.168.6.1
> 
>  
> 
> SITE 2:
> 
>   eth0: external addr
> 
>   eth1: 192.168.7. 254 (network 192.168.7.0/24)
> 
>  
> 
> I am able to pass traffic to and from machines on both networks
> happily however when I try and pass traffic from 192.168.7.254(eth1)
> to 192.168.6.1 or vice versa I can’t any traffic originating from eth1
> (192.168.7.254) to go over the IPSEC tunnel. (If the traffic
> originates from PC1 (192.168.6.1) I see the traffic hit eth0 at site 2
> but it goes no further.)
> 
>  
> 
> Has anyone had a similar situation and found a solution, I have looked
> in to KLIPS which provides a simpler routing setup so that might be my
> solution?
> 
> 
> Regards,
> 
> Johnny
> 
> 
> 
>  
> 
> 
> _______________________________________________
> Users at lists.openswan.org
> https://lists.openswan.org/mailman/listinfo/users
> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155



More information about the Users mailing list