EFW Support

Support => VPN Support => Topic started by: mandusm on Thursday 14 April 2011, 08:30:28 pm



Title: IPSEC Routing Between Tunnels not working
Post by: mandusm on Thursday 14 April 2011, 08:30:28 pm
Hi Guys.

I have a VPN Set up using IPSEC.

I created two tunnels.

TUNNEL1 : NET to NET
Local Network: 192.168.120.0/24
Remote Network: 192.168.80.0/24
PSK: psk001 (not real psk, just for example)

TUNNEL2: HOST to NET (RoadWarrior)
Local Network: 192.168.120.0/24
Remote Network: 192.168.10.0/24
PSK: psk002

So, both tunnels connect to their respective counter parts. And I can ping to both subnets from the router. eg. I can ping both 192.168.10.1 and 192.168.80.1 from the Endian server.
But, I cannot ping from eg. 192.168.10.1 to 192.168.80.1

I realize that this is most probarbly a routing issue? But I am very limited in my knowledge of how to get the two tunnels talking to each other... At the moment, this is the kernel routing table.

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         *               255.255.255.248 U     0      0        0 eth1
192.168.252.208 41.160.19.161   255.255.255.248 UG    0      0        0 ipsec0
41.160.19.160   *               255.255.255.248 U     0      0        0 eth1
41.160.19.160   *               255.255.255.248 U     0      0        0 ipsec0
192.168.80.0    *               255.255.255.0   U     0      0        0 ipsec0
192.168.120.0   *               255.255.255.0   U     0      0        0 br0
192.168.120.0   *               255.255.255.0   U     0      0        0 ipsec0
192.168.10.0    41.160.19.161   255.255.255.0   UG    0      0        0 ipsec0
default         41.160.19.161   0.0.0.0         UG    0      0        0 eth1


This is pretty urgent, if anyone out there can help. It will be greatly appreciated.