[strongSwan] Connection works, but no access to network

Gregg Hughes ghughes at iscinternational.com
Tue Jul 30 20:51:12 CEST 2013

Good afternoon, Tobias!

Thanks for the push; that was precisely the information I needed to get the connection to complete.

After reviewing the dhcp plugin information, I substituted %dhcp for the rightsourceip directive in ipsec.conf - and it worked!  The Ubuntu repository has farp and dhcp compiled in their binary, so it was easy to fix.



-----Original Message-----
From: Tobias Brunner [mailto:tobias at strongswan.org] 
Sent: Tuesday, July 30, 2013 12:21 PM
To: Gregg Hughes
Cc: users at lists.strongswan.org
Subject: Re: [strongSwan] Connection works, but no access to network

Hi Gregg,

First, let me point out the "Forwarding and Split-Tunneling" guide on our wiki [1].

> iface eth0 inet static
> address
> netmask
> gateway
> network
> broadcast
> dns-search XXXX.com
> dns-nameservers XXX.XXX.XXX.XXX

Do the hosts behind the VPN gateway ( know that they have to send packets for to your VPN gateway at and not the default gateway at  If not, you will have to change the routing somehow, for instance, add a route to each host behind the VPN (manually, or e.g. via DHCP option 121), or add a static route on your default gateway that directs the traffic to your VPN gateway.



More information about the Users mailing list