[strongSwan] Routing

[Christian Salway]

I'm having trouble getting routing to work.

I have the following setup

10.0.0.0/22 (clients)  >>  35.178.182.221 (aws elastic ip) >> | 172.31.0.17 (eth0)  > 172.31.92.251 (eth1) |  >> 10.0.0.0/20 (remote network)


$ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         172.31.0.1      0.0.0.0         UG    0      0        0 eth0
172.31.0.0      0.0.0.0         255.255.240.0   U     0      0        0 eth0
172.31.80.0     0.0.0.0         255.255.240.0   U     0      0        0 eth1


If I add the following route manually, it allows me to connect from the server, but i cant get clients to route through.

route add -net 10.0.0.0/20 gateway 172.31.80.1 eth1

$ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         172.31.0.1      0.0.0.0         UG    0      0        0 eth0
10.0.0.0        172.31.80.1     255.255.240.0   UG    0      0        0 eth1
172.31.0.0      0.0.0.0         255.255.240.0   U     0      0        0 eth0
172.31.80.0     0.0.0.0         255.255.240.0   U     0      0        0 eth1

What am i missing??

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20180726/416cd361/attachment.html>