Re: Problems with IPSec tunnel config

Hello again,

An ven., mars 26, 2010, Michael schrieb:
>If I try to ping (Diagnostics menu) from one router with the LAN
>address 192.168.10.0/24 to the other 192.168.13.0/24, I get no
>answer:
>
>  <192.168.10.10>$ ping 192.168.13.8
>  No answer (host down)
>
>Trying the same thing from my mobile IPSec client gives results:
>
>  <192.168.11.12>$ ping 192.168.13.8
>  64 bytes from 192.168.13.8: icmp_seq=0. time=27.155 ms
>
For a summary, the two routers running 1.31 both have almost
identical configurations. The eth0 is the WAN, eth1 is a NAT subnet
192.168.10.0/24, and eth2 has a public 29 bit subnet. Of course the
subnet numbers differ on the two routers.

I am trying to reach a machine connected to 192.168.10.0/24 from
192.168.13.0/24 on the other router, using a IPSec tunnel. Reaching
these machines from devices using 'IPSec mobile client' works well.

The docs say that you can't communicated over IPSec to a natted
subnet on the router, but I'm already doing that with mobile
clients. I have the feeling that I'm understanding something wrong.

Regards,
Michael