[strongSwan] strongswan-5.1.1 routing pb

Martin Willi martin at strongswan.org
Wed Dec 18 09:30:26 CET 2013


> The configuration is quite classical: net-to-net ( === )

>  msc-hmnet{5}:  INSTALLED, TUNNEL, ESP SPIs: c5329687_i c0101bc4_o, IPCOMP CPIs: dcf5_i ab46_o

> But out of the 2 tunnels only 1 is reachable. The other one doesn't ping.

> [root at academ strongswan]# ping
> PING ( 56(84) bytes of data.
> --- ping statistics ---
> 2 packets transmitted, 0 received, 100% packet loss, time 999ms

Does that tunnel work if you don't establish the other one?

Also, I'd try to disable IPComp for testing. There seems to be an issue
with IPcomp on some kernels in some scenarios.


More information about the Users mailing list