[strongSwan] IPSec route based VPN - VTI interface TX Errors NoRoute

Tiago Stoco tmsblink at msn.com
Fri Sep 10 12:31:53 CEST 2021

Hi Noel,

I did not give up on this yet. The last couple of days were quite busy at work and home.

However, I have managed to draw a diagram on how I believe the site-to-site VPN would work 👇


It is quite obvious how the traffic should flow through the VPN tunnel to allow the subnets to talk to each other.

I have managed to spin up a new VM running pfSence to test a pfSense to Pfsense setup and then I will spin another VM to replicate the example you have shared.

Finally, I will be able to verify if my idea will work and be able to identify where is the anomaly in my current setup.

Wish me luck,

Best Regards.


From: Noel Kuntze
Sent: Friday, September 3, 2021 6:22 PM
To: Tiago Stoco; Noel Kuntze; Tobias Brunner; users at lists.strongswan.org
Subject: Re: [strongSwan] IPSec route based VPN - VTI interface TX Errors NoRoute

Hello Tiago,

It's more meant as a practical example on how to configure this and to look for anomalies in your setup.

Kind regards

Am 03.09.21 um 22:54 schrieb Tiago Stoco:
> Hi Noel,
> I will replicate the example below in my lab in the hopes to better understand the concepts behind an IPSec VPN tunnel.
> Tiago Stoco.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20210910/fbd3e76a/attachment.html>

More information about the Users mailing list