Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Jul 2009 02:57:43 +0200
From:      Jigar SOLANKI <sol4nki@gmail.com>
To:        Gergely CZUCZY <phoemix@harmless.hu>
Cc:        freebsd-net@freebsd.org
Subject:   Re: IPsec tunnel help
Message-ID:  <52bc9f190907151757w313175acxa40d4eae656a8345@mail.gmail.com>
In-Reply-To: <20090715181703.00006c68@unknown>
References:  <20090715181703.00006c68@unknown>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

I think that you can't see any outgoing traffic because there is no spd rule
that matches any outgoing traffic ( from site A, ie you freebsd box) : this
just comes from your second spd rule where "in" should be "out" :

Try to replace the second rule:

spdadd 192.168.0.0/24 192.168.1.64/32 any -P in ipsec
 esp/tunnel/217.150.138.138-217.150.130.163/unique;


By :


spdadd 192.168.0.0/24 192.168.1.64/32 any -P out ipsec
 esp/tunnel/217.150.138.138-217.150.130.163/unique;


Hope this helps. :-)

Regards,

--
SOLANKI Jigar
---



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?52bc9f190907151757w313175acxa40d4eae656a8345>