Joshua Schmidlkofer wrote:
I am setting up an IPSec tunnel (ESP) between two networks. I can ping the private side of the routers, from the routers, however, I can't get anything else through. It's very strange. tcpdump shows traffic going in the correct direction, but nothing get's out the internal network.
## [Begin local tunnel: 10.1.1.0/24 ] ############ spdadd 2.2.2.2 10.1.1.0/24 any -P in ipsec esp/tunnel/2.2.2.2-5.5.5.5/require; spdadd 10.1.1.0/24 2.2.2.2 any -P out ipsec esp/tunnel/5.5.5.5-2.2.2.2/require; ## [End ] ############
You need to install forward policies. You can duplicate the input policy and replace "-P in" with "-P fwd" or use setkey from a current ipsec-tools release, which does this automatically.
Regards Patrick - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
