<html>
  <head>
    <meta content="text/html; charset=ISO-8859-1"
      http-equiv="Content-Type">
  </head>
  <body bgcolor="#FFFFFF" text="#000000">
    <div class="moz-cite-prefix">I had a similar problem when I got
      started with Strongswan.  I could connect to the VPN, but couldn't
      browse anything.  I fixed it with this:<br>
      <a
href="http://superuser.com/questions/648283/strongswan-ipsec-vpn-for-windows-7-road-warrior-config">http://superuser.com/questions/648283/strongswan-ipsec-vpn-for-windows-7-road-warrior-config</a><br>
      <br>
      On 11/2/2013 1:32 PM, Luka wrote:<br>
    </div>
    <blockquote
cite="mid:CAD5z2ypJzCj2+q_7ft93AVg9FP1RU8wwLF4+rZfRcHqaxYYudQ@mail.gmail.com"
      type="cite">
      <div dir="ltr">Hi.
        <div>Can someone help me with strong swan configuration. I would
          like to access home network from my iPhone.</div>
        <div>I've setup config(certificates, etc...), following this
          guide:</div>
        <div><a moz-do-not-send="true"
href="http://wiki.strongswan.org/projects/strongswan/wiki/IOS_%28Apple%29">http://wiki.strongswan.org/projects/strongswan/wiki/IOS_(Apple)</a><br>
        </div>
        <div><br>
        </div>
        <div>I can connect to VPN from iPhone, but I can't access home
          network or internet.</div>
        <div>My home network has following settings:</div>
        <div>Subnet mask: 255.255.255.0</div>
        <div>Router ip(local ip of vpn server): 192.168.2.1</div>
        <div>Other devices ip range is 192.168.2.X</div>
        <div>ipsec.conf file:</div>
        <div><br>
        </div>
        <div>
          <p style="margin:0px;font-size:11px;font-family:Menlo">conn
            ios                                              </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            keyexchange=ikev1                              </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            authby=xauthrsasig                             </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            xauth=server                                   </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            left=%defaultroute                             </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            leftsubnet=<a moz-do-not-send="true" href="http://0.0.0.0/0">0.0.0.0/0</a>
                                       </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            leftcert=serverLupoCert.pem                    </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            right=%any                                     </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            rightsubnet=<a moz-do-not-send="true"
              href="http://10.0.0.0/24">10.0.0.0/24</a>                
                   </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            rightsourceip=10.0.0.2                         </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            rightcert=clientCert.pem                   </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo">      
            auto=add                       </p>
          <p style="margin:0px;font-size:11px;font-family:Menlo"><span
              style="font-family:arial;font-size:small"><br>
            </span></p>
          <p style="margin:0px">
            I probably need to change left/right subnet and source IPs
            ? </p>
          <p style="margin:0px"><br>
          </p>
          <p style="margin:0px">Thanks</p>
        </div>
      </div>
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <br>
      <pre wrap="">_______________________________________________
Users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></pre>
    </blockquote>
    <br>
  </body>
</html>