[Swan] Route network packets from private subnet via IPSec tunnel reaching to the other end.

Paul Wouters paul at nohats.ca
Sun Jan 21 23:00:05 UTC 2018


On Sun, 21 Jan 2018, Kaushal Shriyan wrote:

It is unclear what you are asking. Try to phrase this as a technical
problem, less as an architectual consult? If you have a specific
question about your below configuration, you should let us know
what (if any) errors you are seeing or what is not working as
expected. You config below indicates you are trying to ipsec to
connect 34.211.127.169/32 to 146.184.15.100/32 ?

What is the problem?

Paul



> Hi again,
> Attaching the screenshot for the reference.
> 
> [IMAGE]
> 
> ​Best Regards,
> 
> Kaushal
> 
> On Sat, Jan 20, 2018 at 11:45 PM, Kaushal Shriyan <kaushalshriyan at gmail.com> wrote:
>       Hi,
> I have setup libreswan vpn tunnel using IPSec. Details of the setup as attached in the screenshot
> 
> tunnel1 -> 34.211.127.169/10.0.1.80 
> tomcat1 -> 10.0.0.115
> 
> conn application-backend
>         type=tunnel
> authby=secret
> left=%defaultroute
> leftid=34.211.127.169
>         leftnexthop=%defaultroute
> leftsubnet=34.211.127.169/32
> right=146.184.10.5
> rightsubnet=146.184.15.100/32
>         ike=aes128-sha1;modp1024
>         phase2alg=aes128-sha1;modp1024
>         pfs=yes
>         auto=start
> 
> I have a question regarding traffic initiated from tomcat1--> tunnel1---> 146.184.10.5 -> 146.184.15.100/32
> (Encryption Domain IP). How do i route network packets from tomcat1 server (Private IP :- 10.0.0.115/ No public
> IP) reaching to 146.184.15.100 via libreswan IPSec tunnel1 (34.211.127.169 Public IP / 10.0.1.80 Private IP).
> 
> Any help will be highly appreciable.
> 
> Thanks in Advance.
> 
> Regards,
> 
> Kaushal
> 
> 
> 
> 
>


More information about the Swan mailing list