<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>I got Strongswan up and running, and I could connect to the IPsec VPN server from a remote PC, but the remote PC has no connectivity to the internal LAN or the Internet. I think it is a matter of the right iptables commands and could sure use your help!<div><br></div><div>My ipsec.conf, ipsec.secrets, and strongswan.conf are from the Win7 example.</div><div><a href="http://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig" target="_blank" style="font-size: 12pt;">http://wiki.strongswan.org/projects/strongswan/wiki/Win7EapMultipleConfig</a></div><div><br></div><div>I drew this picture of my network starting with an example at the Strongswan wiki. I put my IP addresses on the picture as well. <span style="font-size: 12pt;">Strongswan runs on the router on the left side. The remote road warrior needs to get to the web server on the left in this example.</span></div><div><a href="http://i.imgur.com/e0jg15n.png" target="_blank">http://i.imgur.com/e0jg15n.png</a></div><div><br></div><div><span style="font-size: 12pt;">I only have two iptables commands at the moment. I am pretty sure I am missing a few more to make this all work. Thanks for your help.</span></div><div><br></div><div><div>iptables -I INPUT -j ACCEPT -p udp --dport 500</div><div>iptables -I INPUT -j ACCEPT -p udp --dport 4500</div></div><div><br></div><div>-Alex Red</div><div><br></div> </div></body>
</html>