<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Hi Tobias,<div class=""><br class=""></div><div class="">thanks. FARP is configured on both client and gateway, and I can reach all the internal network from the vpn client (ubuntu linux). The DHCP server is not on the gateway.</div><div class="">Still pinging the vpn client from the internal network does not work. Is there any other config to do? </div><div class=""><br class=""></div><div class="">VPN CLIENT:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># ipsec.conf - strongSwan IPsec configuration file</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># basic configuration</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">config setup</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span># strictcrlpolicy=yes</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span># uniqueids = no</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><br class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">conn vpn</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> right=%<a href="http://me.domain.com" class="">me.domain.com</a></span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> rightid=server</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> rightsubnet=192.168.1.0/24</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> rightauth=psk</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> left=%any</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""> leftid=client</div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> leftauth=eap-mschapv2</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> leftsourceip=%config</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> auto=add</span></div></div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Status of IKE charon daemon (strongSwan 5.5.1, Linux 4.13.0-32-generic, x86_64):</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> uptime: 27 minutes, since Feb 14 23:19:19 2018</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> malloc: sbrk 3276800, mmap 532480, used 1419840, free 1856960</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 3</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> loaded plugins: charon test-vectors unbound ldap pkcs11 aesni aes rc2 sha2 sha1 md4 md5 mgf1 rdrand random nonce x509 revocation constraints acert pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey dnscert ipseckey pem openssl gcrypt af-alg fips-prf gmp agent chapoly xcbc cmac hmac ctr ccm gcm ntru bliss curl soup mysql sqlite attr kernel-netlink resolve socket-default connmark farp stroke updown eap-identity eap-sim eap-sim-pcsc eap-aka eap-aka-3gpp2 eap-simaka-pseudonym eap-simaka-reauth eap-md5 eap-gtc eap-mschapv2 eap-dynamic eap-radius eap-tls eap-ttls eap-peap eap-tnc xauth-generic xauth-eap xauth-pam xauth-noauth tnc-tnccs tnccs-20 tnccs-11 tnccs-dynamic dhcp whitelist lookip error-notify certexpire led radattr addrblock unity</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Listening IP addresses:</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> X.X.X.X</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connections:</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn: %any…<a href="http://me.domain.com" class="">me.domain.com</a>,0.0.0.0/0,::/0 IKEv1/2</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn: local: [client] uses EAP_MSCHAPV2 authentication</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn: remote: [server] uses pre-shared key authentication</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn: child: dynamic === 192.168.1.0/24 TUNNEL</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Security Associations (1 up, 0 connecting):</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn[1]: ESTABLISHED 27 minutes ago, X.X.X.X[server]…Y.Y.Y.Y[server]</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn[1]: IKEv2 SPIs: 66945fc928466229_i* 825b15d6f370bd5e_r, EAP reauthentication in 2 hours</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn[1]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn{1}: INSTALLED, TUNNEL, reqid 1, ESP in UDP SPIs: c7fc94f7_i cb625e29_o</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn{1}: AES_CBC_128/HMAC_SHA1_96, 1512 bytes_i (18 pkts, 750s ago), 2940 bytes_o (35 pkts, 750s ago), rekeying in 14 minutes</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> vpn{1}: 192.168.1.20/32 === 192.168.1.0/24</span></div></div><div class=""><br class=""></div><div class="">VPN SERVER/GATEWAY:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># ipsec.conf - strongSwan IPsec configuration file</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""># basic configuration</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">config setup</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>strictcrlpolicy=no</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>uniqueids = no</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><br class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">conn server-IKEV2</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>auto=add</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>dpdaction=clear</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>keyexchange=ikev2</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>#left</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>#left=%any</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> left=%defaultroute</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>leftsubnet=192.168.1.0/24</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>leftfirewall=yes</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> leftauth=psk</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>leftid=server</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098); min-height: 15px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>#right</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>right=%any</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>rightsourceip=192.168.1.20 (tried also %dhcp but no change)</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>rightauth=eap-mschapv2</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>rightid=client</span></div></div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Status of IKE charon daemon (strongSwan 5.2.1, Linux 4.9.35-v7+, armv7l):</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> uptime: 23 minutes, since Feb 14 23:17:54 2018</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> malloc: sbrk 1216512, mmap 0, used 224680, free 991832</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> worker threads: 11 of 16 idle, 5/0/0/0 working, job queue: 0/0/0/0, scheduled: 9</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> loaded plugins: charon aes rc2 sha1 sha2 md5 random nonce x509 revocation constraints pubkey pkcs1 pkcs7 pkcs8 pkcs12 pgp dnskey sshkey pem openssl fips-prf gmp agent xcbc hmac gcm attr kernel-netlink resolve socket-default farp stroke updown eap-identity eap-aka eap-md5 eap-gtc eap-mschapv2 eap-radius eap-tls eap-ttls eap-tnc xauth-generic xauth-eap xauth-pam tnc-tnccs dhcp lookip error-notify certexpire led addrblock unity</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Virtual IP pools (size/online/offline):</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 192.168.1.20: 1/1/0</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Listening IP addresses:</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> 192.168.1.10</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Connections:</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> iOS-IKEV2: %any...%any IKEv2, dpddelay=30s</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> iOS-IKEV2: local: [server] uses pre-shared key authentication</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> iOS-IKEV2: remote: [client] uses EAP_MSCHAPV2 authentication</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""> iOS-IKEV2: child: 192.168.1.0/24 === dynamic TUNNEL, dpdaction=clear</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2: %any...%any IKEv2, dpddelay=30s</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2: local: [server] uses pre-shared key authentication</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2: remote: [client] uses EAP_MSCHAPV2 authentication</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2: child: 192.168.1.0/24 === dynamic TUNNEL, dpdaction=clear</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Security Associations (1 up, 0 connecting):</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2[4]: ESTABLISHED 21 minutes ago, 192.168.1.10[server]...XXX.XXX.XXX.XXX[client]</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2[4]: IKEv2 SPIs: 29624628c95f9466_i 5ebd70f3d6155b82_r*, pre-shared key reauthentication in 2 hours</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2[4]: IKE proposal: AES_CBC_128/HMAC_SHA1_96/PRF_HMAC_SHA1/MODP_2048</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2{1}: INSTALLED, TUNNEL, ESP in UDP SPIs: cb625e29_i c7fc94f7_o</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2{1}: AES_CBC_128/HMAC_SHA1_96, 2940 bytes_i (35 pkts, 402s ago), 1512 bytes_o (18 pkts, 402s ago), rekeying in 21 minutes</span></div><div style="margin: 0px; font-size: 13px; line-height: normal; font-family: 'Andale Mono'; color: rgb(244, 244, 244); background-color: rgba(0, 0, 0, 0.85098);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">server-IKEV2{1}: 192.168.1.0/24 === 192.168.1.20/32 </span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><br class=""></span></div><div><blockquote type="cite" class=""><div class="">Il giorno 14 feb 2018, alle ore 08:22, Tobias Brunner <<a href="mailto:tobias@strongswan.org" class="">tobias@strongswan.org</a>> ha scritto:</div><br class="Apple-interchange-newline"><div class=""><div class="">Hi Marco,<br class=""><br class=""><blockquote type="cite" class="">VPN Client -> Gateway -> internal network with some servers<br class="">The VPN gets an IP from DHCP Server (i.e 192.168.1.100)<br class="">Gateway has IP 192.168.1.10, can ping the VPN client 192.168.1.100<br class="">Pinging the VPN client from a server in the network (e.g. 192.168.1.20) does not work.<br class=""><br class="">What am I missing?<br class=""></blockquote><br class="">See [1].<br class=""><br class="">Regards,<br class="">Tobias<br class=""><br class="">[1]<br class=""><a href="https://wiki.strongswan.org/projects/strongswan/wiki/ForwardingAndSplitTunneling#Hosts-on-the-LAN" class="">https://wiki.strongswan.org/projects/strongswan/wiki/ForwardingAndSplitTunneling#Hosts-on-the-LAN</a><br class=""></div></div></blockquote></div><br class=""></div></body></html>