[strongSwan] Is a chained client-server VPN possible?

Noel Kuntze noel at familie-kuntze.de
Mon Dec 29 19:12:35 CET 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Tim,

Please show us your ipsec.conf and tell us what client you are using.
We will then be able to help you without writing lots of unecessary text.

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 29.12.2014 um 17:02 schrieb Tim Soderstrom:
> I have a VPN server which handles both a client/server and a site-to-site and have been trying to figure out how to get the client/server to see the network across the site to site. On the client connections, I include the remote IP range in ‘leftsubnet’ but I suspect their is either an ordering problem or maybe an iptables issue. StrongSWAN does add a forward from my client range to the remote range though, so I’m not sure what I’m missing. The site to site itself works like a champ so it’s just getting the client/server VPN to see it.
>
> Is there any documentation on this, or any thoughts or suggestions?
>
> Thanks!
>
> Tim
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJUoZmTAAoJEDg5KY9j7GZYIc0P+QHBXrGm+mMbbYvjCAZDV6oj
AhXcJ+H03xquFS8+EAvYiMIUX+AYgVIRdKiWr2Iy1NUJjzTY7Nk29dYkKaAfMkXB
ozJNuzgF4mhv/S1bJw+Js4RmSscMlBjx5F+RPen+//VQnIS4qD8MCuKk1thnbJXU
aeBGYGrMmkNGAaDcpQa0vt/3KvaKYfEUD3ww2+OaZ5mM/E+/b9L5ANF6MuezIfQ6
kHokCCB9GggHoqVCgAQH0NMLVGTupMba16UOoIDW67ZAS6gGvIy7iUP7PLYOD4mZ
/YlaC3ZRJU0HW5WwCnE38xSF03D8oA4YQXBlK+PdrdFaFl2tduf2IcSOAtFZ8AvX
7HjpHdkVLi9rEsm06FvTOSgGZgPqWRSUHKCbwuTv9dEf/4jI1KnJeyqSHW7s2pLo
3eQiWi5Lmzbgkte6EwjsMaNmo8hKc+XD+8ZAFR4MZVUD+6R5RzXmoOKBw6hrWP5W
aRjibDfdYdPBPVkskEuNJGs+Ozr6XhDaiz98Re2kyGmlw7Wc5Ov+7s+VLgCTD+IV
WyI7OVLIflEapEKw43/nNFCM6r1Cgklp4EHnJGDtLMtX7wQZIxSlaCAQ29+xn23F
tcJou+p3KXaGqKvGGgrUFGaV+XLL8KcTW/ITbJ2dbDBFGKZxUF0OTWHaq0rgdsrZ
P1SnIZmhOAC5xlH4KMRc
=knK8
-----END PGP SIGNATURE-----



More information about the Users mailing list