[Openswan Users] Hub and Spoke issue

steve srtye at outlook.com
Wed Jul 2 08:52:38 EDT 2014


I am trying to get a OpenSwan Hub and spoke working.  I feel like this a 
simple problem but I don't know enough Linux to fix it.
All three servers are running Ubuntu 14.10 and the latest OpenSwan version

 I can ping Spoke1 to Hub & Hub to Spoke 1
 I can ping Spoke2 to Hub & Hub to Spoke 2
 I cannot ping Spoke 1 to Spoke 2
Spoke 1
 conn Oregon-to-SauPaulo
         type=tunnel
         authby=secret
         left=%defaultroute
         leftid=54.186.82.78
         leftnexthop=%defaultroute
         leftsubnets=172.31.0.0/16,192.168.10.0/24
         right=54.232.199.31
         rightsubnets=10.0.0.0/16,192.168.69.0/24
         ike=aes256-sha
         esp=aes256-sha1
         pfs=yes
         auto=start

Spoke 2
 conn Ireland-to-SaoPaulo
         type=tunnel
         authby=secret
         left=%defaultroute
         leftid=54.76.160.103
         leftnexthop=%defaultroute
         leftsubnet=192.168.69.0/24
         right=54.232.199.31
         rightsubnets=10.0.0.0/16,172.31.0.0/16,192.168.10.0/24
         ike=aes256-sha
         esp=aes256-sha1
         pfs=yes
         auto=start
Hub
 conn SauPaulo-to-Oregon
         type=tunnel
         authby=secret
         left=%defaultroute
         leftid=54.232.199.31
         leftnexthop=%defaultroute
         leftsubnet=10.0.0.0/16
         right=54.186.82.78
         rightsubnets=172.31.0.0/16,192.168.10.0/24
         ike=aes256-sha
         esp=aes256-sha1
         pfs=yes
         auto=start

 conn SauPaulo-to-Ireland
         type=tunnel
         authby=secret
         left=%defaultroute
         leftid=54.232.199.31
         leftnexthop=%defaultroute
         leftsubnet=10.0.0.0/16
         right=54.76.160.103
         rightsubnets=192.168.69.0/24
         ike=aes256-sha
         esp=aes256-sha1
         pfs=yes
         auto=start 



More information about the Users mailing list