<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
Your left and right subnets are the same so I don't know how that
will work. Also there is nothing in your config to route the machine
C subnet. Guessing but on B you probably want leftsubnets =
{10.5.5.50,192.168.13.212} and something similar on A. Also is b .50
or .52?<br>
<br>
<div class="moz-cite-prefix">On 05/10/2020 07:14, Mehboob Ansari
wrote:<br>
</div>
<blockquote type="cite"
cite="mid:1803812658.874460.1601878498872.JavaMail.zimbra@wavenetcorp.com">
<meta http-equiv="content-type" content="text/html; charset=UTF-8">
<div style="font-family: arial, helvetica, sans-serif; font-size:
12pt; color: #000000">
<div>Hi Team, <br>
</div>
<div><br data-mce-bogus="1">
</div>
<div>Please help to provide information on requested query. <br
data-mce-bogus="1">
</div>
<div><br data-mce-bogus="1">
</div>
<div>Thanks,<br data-mce-bogus="1">
</div>
<div><br data-mce-bogus="1">
</div>
<div>Regards, <br data-mce-bogus="1">
</div>
<div>Mehboob Ansari<br data-mce-bogus="1">
</div>
<hr id="zwchr" data-marker="__DIVIDER__">
<div data-marker="__HEADERS__"><b>From: </b>"Mehboob Ansari"
<a class="moz-txt-link-rfc2396E" href="mailto:mehboob.ansari@wavenetcorp.com"><mehboob.ansari@wavenetcorp.com></a><br>
<b>To: </b>"swan" <a class="moz-txt-link-rfc2396E" href="mailto:swan@lists.libreswan.org"><swan@lists.libreswan.org></a><br>
<b>Sent: </b>Tuesday, September 29, 2020 12:40:39 PM<br>
<b>Subject: </b>ipsec<br>
</div>
<br>
<div data-marker="__QUOTED_TEXT__">
<div style="font-family: arial, helvetica, sans-serif;
font-size: 12pt; color: #000000">
<div>Hi Team, <br>
</div>
<br>
<div>Please help in below scenario:- <br>
</div>
<br>
<div>I have 3 machines :- machine A ( ip - 10.5.5.7, Client
), machine B(10.5.5.52, server ) and machine
C(192.168.13.212 ). <br>
</div>
<br>
<div>Ipsec sec tunnel established between machine A and
machine B. when i ping from A to B , ipsec whack
--trafficstatus in and out byte get increase. <br>
</div>
<br>
<div>Now machine C is connected with machine B and there is
a route so that i can ping machine C through machine A,
But when i ping machine C from machine A , ping get
started but ipsec whack --trafficstatus is not increasing.
packets are going through tunnel. </div>
<br>
<div>Expected result - I want when i ping machine C through
machine A , ipsec traffic should get increase. </div>
<br>
<div>Note - Ipsec tunnel is only between A and B , where A
is client and B is server. <br>
</div>
<br>
<br>
<div><u><strong>Client ipsec.conf</strong> </u><br>
</div>
<div><span style="text-decoration: underline;"><br>
</span></div>
<div>conn ikesa<br>
authby=rsasig<br>
left=10.5.5.5<br>
#leftsourceip=10.5.5.5<br>
leftsubnet=10.5.5.5/24<br>
leftcert=10.5.5.5 # cert name <br>
leftid=%fromcert<br>
leftsendcert=always <br>
right=10.5.5.50 <br>
#rightsourceip=10.5.5.50 <br>
rightsubnet=10.5.5.50/24 <br>
rightid=%fromcert <br>
#decap-dscp=yes<br>
also=profile<br>
auto=start<span style="text-decoration:
underline;"><br>
<br>
</span></div>
<div><span style="text-decoration: underline;"><br>
</span></div>
<div><span style="text-decoration: underline;">Server
ipsec.conf<br>
</span></div>
<br>
<div>conn profile<br>
authby=rsasig<br>
left=10.5.5.50<br>
#leftsourceip=10.5.5.50<br>
leftsubnet=10.5.5.50/24<br>
leftcert=10.5.5.50<br>
leftid=%fromcert<br>
leftsendcert=always<br>
#leftsubnet=192.168.15.0/24<br>
#rightaddresspool=10.10.5.2-10.10.5.10<br>
right=10.5.5.5<br>
#rightsourceip=10.5.5.5<br>
rightsubnet=10.5.5.5/24<br>
rightid=%fromcert<br>
auto=start<br>
<br>
</div>
<br>
<div>Please help me out. <br>
</div>
<br>
<div>Thanks in advance,<br>
</div>
<br>
<br>
<div>Regards,<br>
</div>
<div>Mehboob Ansari <br>
</div>
</div>
<br>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
Swan mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Swan@lists.libreswan.org">Swan@lists.libreswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.libreswan.org/mailman/listinfo/swan">https://lists.libreswan.org/mailman/listinfo/swan</a>
</pre>
</blockquote>
<br>
</body>
</html>