[strongSwan] Traffic in a Hub and Spoke setup not forwarded

Martin Sand dborn at gmx.net
Tue Nov 8 20:46:47 CET 2016


Hi all

I have a Hub and Spoke setup:
* Central server 192.168.0.1
* Router 1: 192.168.1.1
* Router 2: 192.168.2.1

I cannot reach the computers on the other side of the network although 
tunnel is established.
Do I miss an iptable or route information?

Output from 192.168.1.100 when trying to reach a computer on the other 
network (192.168.2.100):
[user at workstation ~]$ tracepath 192.168.2.100
  1?: [LOCALHOST]                                         pmtu 1500
  1:  router-1                                     0.475ms
  1:  router-1                                     0.445ms
  2:  no reply

Output of route on Router 1 (192.168.1.1):
192.168.2.0/24 via 80.10.10.1 dev eth0  proto static  src 192.168.1.1

Output of route on Router 2 (192.168.2.1):
192.168.1.0/24 via 192.168.0.1 dev eth0  proto static  src 192.168.2.1

Any ideas on what is going wrong? Maybe because one router shows the 
external IP of the Hub instead of the internal one?

Best regards
Martin
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20161108/160d6790/attachment.html>


More information about the Users mailing list