[Swan] NATD IP different than configured IP

Paul Wouters paul at nohats.ca
Mon Aug 27 20:14:30 UTC 2018


On Mon, 27 Aug 2018, Craig Marker wrote:

> Subject: Re: [Swan] NATD IP different than configured IP
> 
> Is this the ipsec status output you’re looking for? This is from the client machine.
>
> + ipsec whack --status
> 000 using kernel interface: netkey
> 000 interface lo/lo ::1.2.3.4 at 500
> 000 interface lo/lo 127.0.0.1 at 4500
> 000 interface lo/lo 127.0.0.1 at 500
> 000 interface enp3s0/enp3s0 4.3.2.1 at 4500
> 000 interface enp3s0/enp3s0 4.3.2.1 at 500
> 000 interface enp7s0/enp7s0 1.2.3.4 at 4500
> 000 interface enp7s0/enp7s0 1.2.3.4 at 500
> 000 interface enp7s0:1/enp7s0:1 2.2.3.4 at 4500
> 000 interface enp7s0:1/enp7s0:1 2.2.3.4 at 500
> 000 interface enp10s0/enp10s0 10.10.20.254 at 4500
> 000 interface enp10s0/enp10s0 10.10.20.254 at 500

yeah. assuming you didn't make a mistake anonymising this, it could
never use 1.2.3.5 as its local IP. So I have no idea what's happening
in your case.

Paul


More information about the Swan mailing list