[strongSwan] Strongswan IPSec VPN is up but does not pass traffic

2018-03-12 Thread Shuchen He
Hi, I have setup a VPN between ASA and strongswan using IKE1. The strongswan work as remote VPN using PSK XAuth. The VPN tunnel is up but I can not ping the remote site. Below is the configuration and some output. My observation at the moment is that the Linux kernel has setup everything but

Re: [strongSwan] Strongswan IPSec VPN is up but does not pass traffic

2018-03-13 Thread Shuchen He
From: Noel Kuntze Sent: Wednesday, 14 March 2018 12:24 AM To: Shuchen He; users@lists.strongswan.org Subject: Re: [strongSwan] Strongswan IPSec VPN is up but does not pass traffic Hi, Please provide the outputs of `iptables-save -c`, `ip a`, `ip r show table all` and `ip ru`. Btw, modp768 is

Re: [strongSwan] Strongswan IPSec VPN is up but does not pass traffic

2018-03-13 Thread Shuchen He
Hi Andreas, Thanks for the help. Please see the command result. # ip route list table 220 10.2.1.0/24 via 10.168.60.226 dev usb0 proto static src 192.168.199.100 Cheers George From: Andreas Steffen Sent: Tuesday, 13 March 2018 7:36 PM To: Shuchen He; users