[strongSwan] strongswan-5.1.1 routing pb

[Martin Willi]

Hi,

> The configuration is quite classical: net-to-net ( 192.168.3.0/24 === 192.168.4.0/24 )

>  msc-hmnet{5}:  INSTALLED, TUNNEL, ESP SPIs: c5329687_i c0101bc4_o, IPCOMP CPIs: dcf5_i ab46_o

> But out of the 2 tunnels only 1 is reachable. The other one doesn't ping.

> [root at academ strongswan]# ping 192.168.4.10
> PING 192.168.4.10 (192.168.4.10) 56(84) bytes of data.
> 
> --- 192.168.4.10 ping statistics ---
> 2 packets transmitted, 0 received, 100% packet loss, time 999ms

Does that tunnel work if you don't establish the other one?

Also, I'd try to disable IPComp for testing. There seems to be an issue
with IPcomp on some kernels in some scenarios.

Regards
Martin