[strongSwan] Strongswan not writting in iptables

Tobias Brunner tobias at strongswan.org
Fri Apr 22 14:08:23 CEST 2016


Hi,

> In fact, the tunnel goes UP but no rules are added into iptables
> although I set *leftfirewall=yes*

There is no evidence that any tunnel is up when looking at the output
below.  For instance, there are no policies for the connection defined
in your config:

> [root at vpn etc]# ip xfrm policy
> src 0.0.0.0/0 dst 0.0.0.0/0
>     dir 3 priority 0
> src 0.0.0.0/0 dst 0.0.0.0/0
>     dir 4 priority 0
> src 0.0.0.0/0 dst 0.0.0.0/0
>     dir 3 priority 0
> src 0.0.0.0/0 dst 0.0.0.0/0
>     dir 4 priority 0
> src ::/0 dst ::/0
>     dir 3 priority 0
> src ::/0 dst ::/0
>     dir 4 priority 0
> src ::/0 dst ::/0
>     dir 3 priority 0
> src ::/0 dst ::/0
>     dir 4 priority 0

So look for any errors in the log while establishing the tunnel (also
check the log of the other peer).

Regards,
Tobias



More information about the Users mailing list