Road Warrior/ipsec vpn Tunnel up but not passing traffic!
-
Help!
I setup the Mobile/Road Warrior VPN via a howto found within the Wiki. I used shrew vpn client.
The setup was simple and straight forward. I connect fine but no traffic passes through the vpn tunnel!
Below is the log output. Any help Is greatly appreciated!!Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "10.30.5.0/24[0] 192.168.111.5/32[0] proto=any dir=out"
Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.111.5/32[0] 10.30.5.0/24[0] proto=any dir=in"
Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 139.146.152.222[0]->139.146.128.190[0] spi=77926953(0x4a51229)
Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 139.146.128.190[0]->139.146.152.222[0] spi=229453372(0xdad2e3c)
Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: no policy found, try to generate the policy : 192.168.111.5/32[0] 10.30.5.0/24[0] proto=any dir=in
Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 2 negotiation: 139.146.152.222[0]<=>139.146.128.190[0]
Aug 6 14:46:47 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA established 139.146.152.222[500]-139.146.128.190[393] spi:3f7b591396945567:1897975766eb7b1dWhat do you think is the issue? ???
-
Make sure that you have IPSEC rules to allow the traffic to come accross the tunnel.
RC -
I have a rule allowing any any on the ipsec interface, thinking that this was the problem but it made no difference.
Any other ideas?
Pat