[Openswan Users] ipsec tunnel with different inner and outer ip families

rakesh bansod rakesh.bansod1209 at gmail.com
Thu May 1 05:02:04 EDT 2014


     HI,

I am trying to create a 4in6 ipsec tunnel.
It gets  created successfully but the policies inserted are incorrect.
these are the policies for end points 2121::1515 and 2121::1616. its 
considering wrong address family and giving 2121::1515 as 33.33.0.0.

src 192.168.1.0/24 dst 192.168.2.0/24
         dir out priority 2344
         tmpl src 33.33.0.0 dst 33.33.0.0
                 proto esp reqid 16389 mode tunnel
src 192.168.2.0/24 dst 192.168.1.0/24
         dir fwd priority 2344
         tmpl src 33.33.0.0 dst 33.33.0.0
                 proto esp reqid 16389 mode tunnel
src 192.168.2.0/24 dst 192.168.1.0/24
         dir in priority 2344
         tmpl src 33.33.0.0 dst 33.33.0.0
                 proto esp reqid 16389 mode tunnel


The same is happening with 6in4 ipsec tunnel.
The policies are incorrect only in cases eith different families.
Its working fine for 4in4 and 6in6.


Thanks and Regards,
Rakesh Bansod


More information about the Users mailing list