<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12px"><div id="yui_3_16_0_1_1427321559160_11450" dir="ltr"><span id="yui_3_16_0_1_1427321559160_11451">I fixed this by doing NAT on the strongSwan host for the virtual ip.</span></div><div id="yui_3_16_0_1_1427321559160_11450" dir="ltr"><span><br></span></div><pre style="border: 0px; margin-top: 0px; margin-bottom: 24px; padding: 1.5em; vertical-align: baseline; font-family: 'Courier 10 Pitch', Courier, monospace; color: rgb(34, 34, 34); line-height: 21px; overflow: auto; font-size: 15px; background: rgb(247, 247, 247);" class="">iptables -A POSTROUTING -t NAT -j SNAT --to-source <VPN IP Adress></pre> <div id="yui_3_16_0_1_1427321559160_11450" dir="ltr" class="" style=""><span class="" style=""><br class="" style=""></span></div><br><div class="qtdSeparateBR"><br><br></div><div class="yahoo_quoted" style="display: block;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 12px;"> <div style="font-family: HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif; font-size: 16px;"> <div dir="ltr"> <font size="2" face="Arial"> On Wednesday, March 18, 2015 8:28 PM, Mark M <mark076h@yahoo.com> wrote:<br> </font> </div> <br><br> <div class="y_msg_container"><div id="yiv1420299570"><div><div style="color:#000;background-color:#fff;font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:12px;"><div id="yiv1420299570yui_3_16_0_1_1426724525898_2394" dir="ltr">I have an Amazon VPC/EC2 instance running strongSwan for my Android client to connect to and have its internet requests sent out the VPC instance and back. The strongSwan server itself is running fine but I cannot figure out how to route the rightsourceip subnet back to the instance, and the righsouceip subnet never seems to leave the VPC subnet. I have rightsourceip=192.168.9.0/24 and I see the assigned virtual IP trying to get out of the VPC but it looks like it gets stopped at the instance gateway. I put 192.168.9.0 in the route table pointing to the server IP, but I don't know if this has to be an assigned subnet or not?</div><div id="yiv1420299570yui_3_16_0_1_1426724525898_2394" dir="ltr"><br></div><div id="yiv1420299570yui_3_16_0_1_1426724525898_2394" dir="ltr">Has anyone done a road-warrior setup on Amazon EC2 and know how to route the virtual ip/subnet back to the server?</div><div id="yiv1420299570yui_3_16_0_1_1426724525898_2394" dir="ltr"><br></div><div id="yiv1420299570yui_3_16_0_1_1426724525898_2394" dir="ltr">Thanks,</div></div></div></div><br><br></div> </div> </div> </div></div></body></html>