Road Warrior/ipsec vpn Tunnel up but not passing traffic!



  • Help!
          I setup the Mobile/Road Warrior VPN via a howto found within the Wiki. I used shrew vpn client.
    The setup was simple and straight forward. I connect fine but no traffic passes through the vpn tunnel!
    Below is the log output. Any help Is greatly appreciated!!

    Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "10.30.5.0/24[0] 192.168.111.5/32[0] proto=any dir=out"
    Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: ERROR: such policy does not already exist: "192.168.111.5/32[0] 10.30.5.0/24[0] proto=any dir=in"
    Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 139.146.152.222[0]->139.146.128.190[0] spi=77926953(0x4a51229)
    Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: IPsec-SA established: ESP 139.146.128.190[0]->139.146.152.222[0] spi=229453372(0xdad2e3c)
    Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: no policy found, try to generate the policy : 192.168.111.5/32[0] 10.30.5.0/24[0] proto=any dir=in
    Aug 6 14:46:52 racoon: [Unknown Gateway/Dynamic]: INFO: respond new phase 2 negotiation: 139.146.152.222[0]<=>139.146.128.190[0]
    Aug 6 14:46:47 racoon: [Unknown Gateway/Dynamic]: INFO: ISAKMP-SA established 139.146.152.222[500]-139.146.128.190[393] spi:3f7b591396945567:1897975766eb7b1d

    What do you think is the issue? ???



  • Make sure that you have IPSEC rules to allow the traffic to come accross the tunnel.
    RC



  • I have a rule allowing any any on the ipsec interface, thinking that this was the problem but it made no difference.
    Any other ideas?
    Pat


Log in to reply