• Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login
Netgate Discussion Forum
  • Categories
  • Recent
  • Tags
  • Popular
  • Users
  • Search
  • Register
  • Login

chained ipsec tunnels and routing issues

Scheduled Pinned Locked Moved IPsec
2 Posts 2 Posters 402 Views
Loading More Posts
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • X
    xinity
    last edited by Jun 26, 2018, 6:16 AM

    Hello here,

    i'm trying to build a rather complex setup which chains multiple ipsec tunnels.

    to put it simply here is the setup:
    network1==>pfsense(ipsec)<==>pfsense(ipsec)<==network2==>strongswan(ipsec)==>network3

    network1: 192.168.10.0/24
    network2: 192.168.0.0/24
    network3: 172.19.0.0/16

    from network1 and network3 i can access network2 no problem

    but I can't access network3 from network1 and vice-versa

    Any clues on how to fix that ?

    Thanks a lot for your help folks :)

    Cheers,

    1 Reply Last reply Reply Quote 0
    • J
      jimp Rebel Alliance Developer Netgate
      last edited by Jun 26, 2018, 12:40 PM

      Every step needs P2 entries for every possible combination of traffic.

      • On both sides of the tunnel from 1<->2, it needs P2s for 1-2 and 1-3.
      • On both sides of the tunnel from 2<->3, it needs P2s for 2-3 and 1-3.

      Expanded a bit:

      Site 1 tunnel 1<->2 has P2s:

      • Local 1 / Remote 2
      • Local 1 / Remote 3

      Site 2 tunnel 2<->1 has P2s:

      • Local 2 / Remote 1
      • Local 3 / Remote 1

      Site 2 tunnel 2<->3 has P2s:

      • Local 2 / Remote 3
      • Local 1 / Remote 3

      Site 3 tunnel 3<->2 has P2s:

      • Local 3 / Remote 2
      • Local 3 / Remote 1

      Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

      Need help fast? Netgate Global Support!

      Do not Chat/PM for help!

      1 Reply Last reply Reply Quote 0
      2 out of 2
      • First post
        2/2
        Last post
      Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.
        This community forum collects and processes your personal information.
        consent.not_received