Help - IPSEC routing!
Posted: Mon Sep 10, 2012 12:53 pm
Hi all!
I hope you can help me with this problem.
I have this working ipsec connection in my Debian server:
####
conn TEST_1
type=tunnel
auto=start
auth=esp
authby=secret
pfs=no
left=192.168.2.1
leftid=201.XX.XX.XXX
leftnexthop=192.168.2.254
leftsubnet=192.168.1.0/24
right=200.250.XXX.XXX
rightsubnet=10.101.4.0/22
keyexchange=ike
ike=aes128-sha1-modp1024
ikelifetime=7200s
esp=aes128-sha1
keylife=7200s
rekey=yes
keyingtries=%forever
####
I can ping normally the hosts on 10.101.4.0/22 segment.
But now i have to ping other host => 10.143.6.188, at the 10.143.4.0/22 segment.
How can i do this?
**Its a Debian OS with shorewall and OpenSwan.
Thank you!
I hope you can help me with this problem.
I have this working ipsec connection in my Debian server:
####
conn TEST_1
type=tunnel
auto=start
auth=esp
authby=secret
pfs=no
left=192.168.2.1
leftid=201.XX.XX.XXX
leftnexthop=192.168.2.254
leftsubnet=192.168.1.0/24
right=200.250.XXX.XXX
rightsubnet=10.101.4.0/22
keyexchange=ike
ike=aes128-sha1-modp1024
ikelifetime=7200s
esp=aes128-sha1
keylife=7200s
rekey=yes
keyingtries=%forever
####
I can ping normally the hosts on 10.101.4.0/22 segment.
But now i have to ping other host => 10.143.6.188, at the 10.143.4.0/22 segment.
How can i do this?
**Its a Debian OS with shorewall and OpenSwan.
Thank you!