<html><head></head><body>I see no routes installed for the tunnel. Can you add them and post the outcome? <br><br><div class="gmail_quote">On 29 July 2014 23:48:17 EEST, Joe Ryan <jr@aphyt.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<pre class="k9mail">On DigitalOcean<br /><br />default via <a href="http://162.243.9.1">162.243.9.1</a> dev eth0 metric 100<br /><a href="http://10.128.0.0/16">10.128.0.0/16</a> dev eth1 proto kernel scope link src <a href="http://10.128.120.160">10.128.120.160</a><br /><a href="http://162.243.9.0/24">162.243.9.0/24</a> dev eth0 proto kernel scope link src <a href="http://162.243.9.250">162.243.9.250</a><br /><br />On BeagleBone<br /><br />default via <a href="http://192.168.250.50">192.168.250.50</a> dev eth0<br /><a href="http://192.168.7.0/30">192.168.7.0/30</a> dev usb0 proto kernel scope link src <a href="http://192.168.7.2">192.168.7.2</a><br /><a href="http://192.168.250.0/24">192.168.250.0/24</a> dev eth0 proto kernel scope link src <a href="http://192.168.250.60">192.168.250.60</a><br /><br />Thank you,<br />Joe<br /><br /><br />On 2014-07-29 13:36, Vyronas Tsingaras wrote:<br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-l!
eft: 1px
solid #729fcf; padding-left: 1ex;"> Please post the output of<br /> <br /> ip route show<br /> <br /> On 29 July 2014 23:24:33 EEST, Joe Ryan <jr@aphyt.com> wrote:<br /> <br /><blockquote class="gmail_quote" style="margin: 0pt 0pt 1ex 0.8ex; border-left: 1px solid #ad7fa8; padding-left: 1ex;"> Hello Everyone,<br /> <br /> I have a DigitalOcean VPS running Ubuntu 12.04 that I want to<br /> connect to<br /> with a BeagleBone running Debian so that I can access all of the<br /> devices<br /> on the same subnet as the BeagleBone, and not have to worry about an<br /> IT<br /> department opening ports. I have tried this with both StrongSwan<br /> 4.5.2<br /> and 5.2.0 and have the same result, so I'm sure it's my<br /> configuration.<br /> After bringing up the the connection everything negotiates as<br /> expected,<br /> and the final line of ipsec status all is machinetun{1}:<br /> <a href="http://10.128.0.0/16">10.128.0.0/16</a> [1]<br /> === <a
href="http://192.168.250.0/24">192.168.250.0/24</a> [2] where machinetun is the connection<br /> <a href="http://10.128.0.0/16">10.128.0.0/16</a> [1] is<br /> a private network on DigitalOcean and the <a href="http://192.168.250.0/24">192.168.250.0/24</a> [2] is a<br /> private<br /> network on my machine. My logs show the CHILD_SA being established<br /> and<br /> rekeyed as expe!<br /> cted,<br /> with keep alive packets going out frequently, and<br /> nothing to suggest a problem.<br /> <br /> At this point I would hope that I would be able to ping the gateway<br /> on<br /> my machine, <a href="http://192.168.250.60">192.168.250.60</a> [3] from the DigitalOcean VPS private IP<br /> address<br /> using one of the following:<br /> <br /> #ping the BeagleBone gateway from DO<br /> ping <a href="http://192.168.250.60">192.168.250.60</a> [3]<br /> #ping the BeagleBone gateway with an interface on the DO private<br /> network<br /> ping -I <a
href="http://10.128.120.160">10.128.120.160</a> [4] <a href="http://192.168.250.60">192.168.250.60</a> [3]<br /> <br /> But get no results in this direction or the reverse.<br /> <br /> I also have net.ipv4.ip_forward 1 on both machines.<br /> <br /> My configurations are below, and I hope someone might have a good<br /> idea<br /> what direction I can look to in to figure out what I've done wrong.<br /> <br /> # BeagleBone Conf<br /> config setup<br /> strictcrlpolicy=no<br /> !<br /> <br /> charondebug=1<br /> conn %default<br /> ikelifetime=60m<br /> keylife=20m<br /> rekeymargin=3m<br /> keyingtries=%forever<br /> keyexchange=ikev2<br /> left=%any<br /> leftcert=beagleCert.der<br /> leftid=beagle@hostname.com<br /> lefthostaccess=yes<br /> leftfirewall=yes<br /> <br /> conn machinetun<br /> leftsourceip=%config<br /> leftsubnet=<a href="http://192.168.250.0/24">192.168.250.0/24</a> [2]<br /> right=<a href="http://hostname.com">hostname.com</a> [5]<br /> rightid=@hostname!
.com<br
/> rightsubnet=<a href="http://10.128.0.0/16">10.128.0.0/16</a> [1]<br /> auto=start<br /> <br /> # DigitalOcean Conf<br /> config setup<br /> strictcrlpolicy=no<br /> conn %default<br /> ikelifetime=60m<br /> keylife=20m<br /> rekeymargin=3m<br /> keyingtries=1<br /> keyexchange=ikev2<br /> left=%any<br /> leftcert=svCert.!<br /> der<br /> /> leftid=@hostname.com<br /> lefthostaccess=yes<br /> leftfirewall=yes<br /> <br /> conn machinetun<br /> leftsubnet=<a href="http://10.128.0.0/16">10.128.0.0/16</a> [1]<br /> right=%any<br /> rightsubnet=<a href="http://192.168.250.0/24">192.168.250.0/24</a> [2]<br /> rightid=beagle@hostname.com<br /> rightsourceip=<a href="http://10.128.0.50">10.128.0.50</a> [6]<br /> auto=add<br /> <br /> Thank you,<br /> Joe<br /> <br /> -------------------------<br /> <br /> Users mailing list<br /> Users@lists.strongswan.org<br /> <a href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a!
> [7]<br
/></blockquote> <br /> --<br /> Sent from my Android device with K-9 Mail. Please excuse my brevity.<br /> <br /> Links:<br /> ------<br /> [1] <a href="http://10.128.0.0/16">http://10.128.0.0/16</a><br /> [2] <a href="http://192.168.250.0/24">http://192.168.250.0/24</a><br /> [3] <a href="http://192.168.250.60">http://192.168.250.60</a><br /> [4] <a href="http://10.128.120.160">http://10.128.120.160</a><br /> [5] <a href="http://hostname.com">http://hostname.com</a><br /> [6] <a href="http://10.128.0.50">http://10.128.0.50</a><br /> [7] <a href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a><br /></blockquote></pre></blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>