<div dir="ltr"><font color="#000000" face="Times New Roman" size="3">
</font><div style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">Hi,</font></font></font></div><div style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri"></font></font></font> </div>
<div style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">I have just been using Strongswan for the first time and firstly
I’d like to say how impressed I was in how easy it was to setup the VPN tunnels.
I got my two tunnels working within about 20 minutes of installing Strongswan.</font></font></font></div><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">I have got a hub and two spokes and once the two tunnels
were established I can successfully communicate between the spokes and the hub.</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">The problem I’ve got however is that each ‘Spoke’ of the VPN
cannot contact other spokes in the VPN.</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">My first thought that this was that IPv4 Forwarding needs to
be enabled however enabling IPv4 Forwarding did not solve the problem.</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">I’ve also tried adding each spoke subnet as ‘Left’ subnets
in the other connections in ipsec.conf but Strongswan reports “no local address
found in traffic selector <a href="http://10.6.0.0/24">10.6.0.0/24</a>” as that subnet is not allocated to my
adapter.</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">The other points to note is that my machine has only one
network adapter which is connected to the internet so to get a local subnet I added
a second IP address to the adapter (eth0:0)</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">Does anyone have any suggestions on what I should try text?</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">Configuration below…</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">Thanks,</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">Kevin</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><b><font size="3"><font color="#000000"><font face="Calibri">Interfaces</font></font></font></b></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">auto eth0</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">iface eth0 inet static</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>address xxx.xxx.xxx.xxx</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>gateway zzz.zzz.zzz.zzz</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>netmask 255.255.252.0</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">auto lo</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">iface lo inet loopback</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">auto eth0:0</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">iface eth0:0 inet
static</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>address 172.16.0.1</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>netmask 255.255.0.0</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><b><font size="3"><font color="#000000"><font face="Calibri">ipsec.conf</font></font></font></b></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"># ipsec.conf -
strongSwan IPsec configuration file</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"># basic configuration</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">config setup</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span># plutodebug=all</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span># crlcheckinterval=600</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span># strictcrlpolicy=yes</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span># cachecrls=yes</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>nat_traversal=yes</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>charonstart=yes</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>plutostart=yes</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"># Add connections
here.</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">conn %default</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>ikelifetime=60m</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>keylife=20m</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>rekeymargin=3m</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>keyingtries=1</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>keyexchange=ikev2</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>authby=secret</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>mobike=yes</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"># CSVNETKP Connection</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">conn csvnetkp</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>left=%any</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>leftsubnet=<a href="http://172.16.0.0/24,10.6.0.0/24">172.16.0.0/24,10.6.0.0/24</a></font></font></font></i></p>
<font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>leftid=@csvpn.local</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>right=aaa.aaa.aaa.aaa</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>rightsubnet=<a href="http://10.4.0.0/16">10.4.0.0/16</a></font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>auto=route</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>esp=aes256</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri">conn csvnetmsdn2</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>left=%any</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>leftsubnet=<a href="http://172.16.0.0/24,10.4.0.0/16">172.16.0.0/24,10.4.0.0/16</a></font></font></font></i></p>
<font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>leftid=@csvpn.cirrasoft.local</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>right=bbb.bbb.bbb.bbb</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>rightsubnet=<a href="http://10.6.0.0/16">10.6.0.0/16</a></font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>auto=route</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font size="3"><font color="#000000"><font face="Calibri"><span> </span>esp=aes256</font></font></font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><i><font color="#000000" face="Calibri" size="3"> </font></i></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">Where </font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">xxx.xxx.xxx.xxx is my Public facing address</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">zzz.zzz.zzz.zzz is my ISP gateway</font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">aaa.aaa.aaa.aaa is the Gateway of ‘spoke’ Subnet <a href="http://10.4.0.0/16">10.4.0.0/16</a></font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">bbb.bbb.bbb.bbb is the Gateway of ‘spoke’ Subnet <a href="http://10.6.0.0/16">10.6.0.0/16</a></font></font></font></p><font color="#000000" face="Times New Roman" size="3">
</font><p style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"> </font></p><font color="#000000" face="Times New Roman" size="3">
</font><div style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">And I have my PSK’s in the secrets file mapped to the two
gateways.</font></font></font></div><div style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri"></font></font></font> </div><div style="margin:0cm 0cm 0pt"><font size="3"><font color="#000000"><font face="Calibri">If anyone can help this would be much appreciated..</font></font></font></div>
<div style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"></font> </div><div style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3">I'm sure I am almost there but... not quite!</font></div>
<div style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3"></font> </div><div style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3">Many Thanks,</font></div><div style="margin:0cm 0cm 0pt">
<font color="#000000" face="Calibri" size="3"></font> </div><div style="margin:0cm 0cm 0pt"><font color="#000000" face="Calibri" size="3">Kevin</font></div><font color="#000000" face="Times New Roman" size="3">
</font></div>