Tom Eastep wrote:
Joshua Schmidlkofer wrote:
I am setting up an IPSec tunnel (ESP) between two networks. I can ping
the private side of the routers, from the routers, however, I can't get
anything else through. It's very strange. tcpdump shows traffic going
in the correct direction, but nothing get's out the internal network.
## [Begin local tunnel: 10.1.1.0/24 ] ############
spdadd 2.2.2.2 10.1.1.0/24 any -P in ipsec
esp/tunnel/2.2.2.2-5.5.5.5/require;
spdadd 10.1.1.0/24 2.2.2.2 any -P out ipsec
esp/tunnel/5.5.5.5-2.2.2.2/require;
## [End ] ############
If you are running the 2.6.10 kernel, then you need ipsec-tools 0.5 and
you need a -P fwd rule. See http://www.ipsec-howto.org/x277.html.
-Tom
Now that I am over my fan-boy moment, what is the recommended practice?
thanks,
joshua
-
: send the line "unsubscribe linux-net" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
