<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.E-MailFormatvorlage17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 70.85pt 2.0cm 70.85pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="DE" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">I wonder how the routing entries are written to table 220, and which are neccesary. Is there any place , like _updown for firewall rules, where I can see how and what is done ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">My problem: <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">If I use IPv4 tunnel and traffic, it’s all ok, rules in table 220 appear and VPN works from LAN to LAN.<o:p></o:p></p>
<p class="MsoNormal">If I use IPv6 tunnel and IPv4 traffic, nothing appears in table 220. What can be the reason for such behavior ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">And, I was not able to find myself a rule that works, I tried to add to table 220 rules like
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">ip route add 192.168.2.0/24 proto static scope global dev eth0 src 192.168.0.1 table 220<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">with REMOTE_LAN_NET src LOCAL_LAN_ADDRESS <o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">(derived from strongSwan example https://www.strongswan.org/testing/testresults/ipv6/net2net-ip4-in-ip6-ikev2/ )<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">but it dont’t work. VPN connection is up, but no ping from LAN to LAN, it seems the traffic is not thrown into tunnel (policy based VPN).<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Can anyone please give a hint ?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Regards,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thomas<o:p></o:p></p>
</div>
<span style="font-size: 10pt; font-family: Arial, serif, EmojiFont;">-- <br>
Thomas Rudolph<br>
Teleconnect GmbH <br>
</span><span style="font-size: 8pt; font-family: Arial, serif, EmojiFont;">Am Lehmberg 54, 01157 Dresden, Germany<br>
<br>
</span>
<table style="font-size: 10pt; font-family: Arial, serif, EmojiFont;" border="0" cellpadding="0" cellspacing="0">
<tbody>
<tr>
<td>Phone:</td>
<td width="15"></td>
<td>+49 351 4236 214 (Main: - 210)</td>
</tr>
<tr>
<td>E-Mail/Skype: </td>
<td></td>
<td><a href="mailto:rudt@teleconnect.de">rudt@teleconnect.de</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<a href="https://www.youtube.com/watch?v=YtFrOo9rzSU" target="_blank" rel="noopener" style="font-size: 10pt; font-family: Arial, serif, EmojiFont; background-color: #5aa035; border: none; color: white; padding: 5px 15px; text-align: center; text-decoration: none; display: inline-block; margin: 4px 2px; cursor: pointer;"> Watch
our current video! </a> <br>
<br>
<a href="https://www.teleconnect.de" target="_blank" rel="noopener" style="font-size: 10pt; font-family: Arial, serif, EmojiFont; background-color: #C81714; border: none; color: white; padding: 5px 15px; text-align: center; text-decoration: none; display: inline-block; margin: 4px 2px; cursor: pointer;"> Teleconnect </a>
<a href="https://twitter.com/Teleconnect_" target="_blank" rel="noopener" style="font-size: 10pt; font-family: Arial, serif, EmojiFont; background-color: #0097D3; border: none; color: white; padding: 5px 15px; text-align: center; text-decoration: none; display: inline-block; margin: 4px 2px; cursor: pointer;">
Twitter </a> <a href="https://www.linkedin.com/company/teleconnect-gmbh/" target="_blank" rel="noopener" style="font-size: 10pt; font-family: Arial, serif, EmojiFont; background-color: #00ABF1; border: none; color: white; padding: 5px 15px; text-align: center; text-decoration: none; display: inline-block; margin: 4px 2px; cursor: pointer;">
Linkedin </a> <br>
<span style="font-size: 8pt; font-family: Arial, serif, EmojiFont;"><br>
USt.-IdNr. (VAT ID): DE140301522<br>
Registergericht (Commercial registry): Dresden, HRB 1040<br>
Geschäftsführer (Managing Director): Dr. Gerald Nürnberger<br>
</span>
<hr>
<span style="font-size: 8pt; font-family: Arial, serif, EmojiFont;color: #999999;">Der Inhalt dieser Mail enthält möglicherweise vertrauliche Informationen und ist ausschließlich für den bezeichneten Adressaten bestimmt. Wenn Sie nicht der richtige Adressat
sind, teilen Sie dem Absender bitte den Erhalt der Mail mit und löschen Sie die Mail.<br>
The content of this mail may contain confidential information and is intended solely for the designated addressee. If you are not the intended addressee, then please inform the sender about the receipt of this mail and delete the mail.</span>
</body>
</html>