I have a couple problems that I'm trying to find solutions to. I have Openswan and ASA configure as a IPSec VPN tunnel and the connection is established and working, but with some little problems. The topology is looking like this:
ping from myPC to one of the servers is working. But
ping from the servers or Openswan is not working. What I have done for now is using
iptables (POSTROUTING,MASQUERADE,enabled forwarding etc.).
Looking at the routing table it appears that I'm missing the route that Openswan should've added.
Kernel IP routing table Destination Gateway Genmask Flags Metric Ref Use Iface 22.214.171.124 0.0.0.0 255.255.255.192 U 0 0 0 eth0 192.168.10.0 0.0.0.0 255.255.254.0 U 0 0 0 eth2 169.254.0.0 0.0.0.0 255.255.0.0 U 1002 0 0 eth0 169.254.0.0 0.0.0.0 255.255.0.0 U 1003 0 0 eth2 0.0.0.0 126.96.36.199 0.0.0.0 UG 0 0 0 eth0
And I don't know why it's not adding. When I try to add it manually, it still is not working. Any solutions about this or hints?
Also, this is all installed on CentOS with two physical interfaces eth0 (public) eth2 ( local ) and this is what I found in the log files:
Sep 11 05:36:09 localhost pluto: "infra" #6: route-client output: /usr/libexec/ipsec/_updown.netkey: doroute `ip route replace 192.168.0.0/23 via 192.168.10.1 dev eth0 src 192.168.10.1' failed (RTNETLINK answers: No such process)