>   Disregard the last message - the setup works.  I was trying to ping from
> an ssh session to the router.  That still doesn't work - but I can ping
from
> all other hosts on my subnet to the other subnet and vice versa.   Does
> anybody know why I wouldn't be able to ping from the router to the other
> subnet?

You have to build specific tunnels for the traffic you want to pass.  The
way the tunnels are built, traffic from the IP of the gateway system will
NOT be sent by defualt.

There are two possible endpoints for the VPN tunnel, the host (your LRP box
running IPSec), and the subnet behind the host, giving 4 possible tunnels
you can create:
subnet <> subnet
host <> host
host <> subnet
subnet <> host

You have to build all four tunnels (or go through some routing gymnastics)
to get everything on the near side talking to everything on the far
side...the FreeS/WAN docs have more details.

Charles Steinkuehler
http://lrp.steinkuehler.net
http://c0wz.steinkuehler.net (lrp.c0wz.com mirror)



_______________________________________________
Leaf-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/leaf-user

Reply via email to