Hi
I am using strongSwan U5.4.0/K4.4.107 (embedded device).
The ipsec tunnel is established over a mobile network and it works fine.
Additionally I have an Ethernet interface eth0 with the address 10.162.110.161.
eth0 is connected to 10.162.110.165.
I am looking for a way to access the devices connected to eth0 also locally and not
only through the tunnel (connections 10.162.110.161 <=> 10.162.110.165 should
work).
Is that even possible? If so how?
I have:
---------
# ipsec status
Security Associations (1 up, 0 connecting):
one[1]: ESTABLISHED 9 seconds ago,
10.162.225.65[****]...91.230.141.233[****]
one{1}: INSTALLED, TUNNEL, reqid 1, ESP SPIs: cb51bd6c_i b9503f34_o
one{1}: 10.162.110.160/29 === 10.0.0.0/
---------
# route -n
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 ppp0
10.162.110.160 0.0.0.0 255.255.255.248 U 100 0 0 eth0
---------
ip route show table 220
10.0.0.0/8 via xxx.xxx.xxx.xxx dev ppp0 proto static src 10.162.110.161
----------
# ipsec.conf:
conn one
# we are left
left=10.162.225.65
leftid=*****
leftsubnet=10.162.110.160/29
leftcert=****.crt
leftsendcert=always
# XXX is right
right=xxx.xxx.xxx.xxx.
rightid=****
rightsubnet=10.0.0.0/8
auto=start
----------
Regards
René
