[strongSwan] net-net sample can not work on ubuntu14.04

yzhu1 Yanjun.Zhu at windriver.com
Thu May 7 08:37:22 CEST 2015


Hi, Bernhard

Follow your advice, I added this route.
But it does not work.

I want to know how you configure strongswan in "public IP on eth0 
192.168.120.125".

192.168.2.0/24 <=> 192.168.2.1 hardware router xx.xx.xx.xx (public IP 
from provider) <=> Internet <=> public IP on eth0 192.168.120.125 <=> 
192.168.120.0/24 on eth1

how do you configure your strongswan? what is the version of strongswan? 
Do you enable tnc feature?

Would you like to share your configuration files? such as ipsec.conf, 
strongswan.conf.

Thanks a lot.
Zhu Yanjun

On 05/06/2015 09:32 PM, Bernhard Marx wrote:
> Hi Alex,
>
> yes; I had a default gateway of 192.168.120.5 in the network.
> strongswan server has a own separate ip...
>
> Yes I'm trying adding this route on the "primary" gateway, but it 
> looks like as it is a MS-TMG (Microsoft Forefront server) it not 
> really taking the route...
>
>
>
> 2015-05-06 15:05 GMT+02:00 Alex Zetaeffesse <fzetafs at gmail.com 
> <mailto:fzetafs at gmail.com>>:
>
>     On Wed, May 6, 2015 at 8:44 AM, Bernhard Marx
>     <bernhard.marx at gmail.com <mailto:bernhard.marx at gmail.com>> wrote:
>
>         Hi all,
>
>         for my issue I could resolve it with adding a routing rule to
>         all clients, because the VPN is not the default gateway for
>         192.168.120.0/24 <http://192.168.120.0/24> network...
>
>
>     Hi Berhnard,
>
>     my understanding is that you have two Internet lines, am I correct?
>     it should be possible to add a route on the real gateway to
>     redirect packets to the 2nd (VPN) gateway without intervening on
>     each client.
>     I knew it might be a routing problem,
>
>     Alex
>
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20150507/03de04c4/attachment.html>


More information about the Users mailing list