Re: [strongSwan] DHCP/Any Traffic over an established VPN tunnel

2009-10-10 Thread Daniel Mentz
Hi Carlos, I learned from your e-mail that the subnet your branch office uses is 172.17.0.0/24 Why don't you assign the static (internal) IP address 172.17.0.3 to the Linksys / Dlink router and set up a separate DHCP server in that subnet? You could also set up a DHCP Relay agent and use the D

Re: [strongSwan] Strongswan - Linux Route Interaction Part 2

2009-10-10 Thread Daniel Mentz
Hi Barry, I can confirm the behavior of the linux kernel. You need to set up a route to 192.168.2.0/24. It's not going to work otherwise. I understand that this is confusing. The nexthop determined by the routing table is irrelevant because an ESP and another IP header will be put in front of