[strongSwan] Routing problem

Ostrowski Michał / IT DIMAR m.ostrowski at dimar.pl
Thu Feb 18 16:58:43 CET 2010


Hello,
my configuration is as follows:
config setup
         plutodebug=all
         # crlcheckinterval=600
         # strictcrlpolicy=yes
         # cachecrls=yes
         # nat_traversal=yes
         charonstart=no
         plutostart=yes
         interfaces="ipsec0=eth1"
# Add connections here.

conn dimar_alior
         ikelifetime=28800
         keylife=3600
         keyingtries=%forever
         authby=secret
         auth=esp
         ike=aes256-sha1-modp1536!
         esp=aes256-sha1-modp1536!
         pfs=yes
         auto=add
         left=my_external_ip
         leftsubnet=192.168.0.77/32
         right=aa.aa.aa.bb
         rightsourceip=aa.aa.aa.cc

Other side of a connection is probably a Cisco or Juniper appliance 
(I've not been given any information on that). I can establish the 
tunnel successfully (as confirmed by remote party) but I can't find a 
way to route the traffic through tunnel.
The aa.aa.aa.cc address above was called 'encryption domain' by third 
party, aa.aa.aa.bb is their public IP.
What would be the required routing configuration?


Additional info:
ifconfig -a
eth0      Link encap:Ethernet  HWaddr 00:25:64:3c:9e:07
           inet addr:192.168.0.1  Bcast:192.168.255.255  Mask:255.255.0.0
           inet6 addr: fe80::225:64ff:fe3c:9e07/64 Scope:Link
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:2092748 errors:0 dropped:0 overruns:0 frame:0
           TX packets:2134906 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:1000
           RX bytes:387060174 (369.1 MiB)  TX bytes:762994019 (727.6 MiB)
           Interrupt:16

eth1      Link encap:Ethernet  HWaddr 00:25:64:3c:9e:08
           inet addr:my_external_ip  Bcast:xx.xx.xx.195 
Mask:255.255.255.252
           inet6 addr: fe80::225:64ff:fe3c:9e08/64 Scope:Link
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:77785 errors:0 dropped:0 overruns:0 frame:0
           TX packets:65605 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:1000
           RX bytes:57921521 (55.2 MiB)  TX bytes:10439329 (9.9 MiB)
           Interrupt:17

lo        Link encap:Local Loopback
           inet addr:127.0.0.1  Mask:255.0.0.0
           inet6 addr: ::1/128 Scope:Host
           UP LOOPBACK RUNNING  MTU:16436  Metric:1
           RX packets:93421 errors:0 dropped:0 overruns:0 frame:0
           TX packets:93421 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:0
           RX bytes:14600752 (13.9 MiB)  TX bytes:14600752 (13.9 MiB)


Regards,
Ostrowski Michal




More information about the Users mailing list