-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 On 12/13/2016 06:53 AM, John Depp wrote: > OK. I've got testlab installed in GNS for testing purposes, with 2 > dumb vpcs to emulate local networks, 2 virtualbox VMs with debian > 8, shorewall and strongswan: VPC1 (10.1.1.100) --- (10.1.1.1) > Router1 (10.100.0.1) --- (switch) --- (10.100.0.2) Router2 > (10.1.2.1) --- (10.1.2.100) VPC2 All networks are /24. Routers > configs are similar except IP addresses. I've got identical > behavior with virtual setup as with physical: - ipcomp turned off, > packets go throu - ipcomp turned on, packets rejected Here is > shorewall dump from virtual Router1 with suggested ipip tunnel > option, packets still rejected, along with shorewall's ipsec.conf. > Thank you for your time and patience. >
No problem. I need you to produce another dump collected just as this one, after you have installed the ipsec-tools package. Without that package installed, the dump contains no IPSEC information. I apologize for not mentioning that earlier, - -Tom - -- Tom Eastep \ When I die, I want to go like my Grandfather who Shoreline, \ died peacefully in his sleep. Not screaming like Washington, USA \ all of the passengers in his car http://shorewall.net \________________________________________________ -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: GPGTools - http://gpgtools.org iQIcBAEBCAAGBQJYUCUZAAoJEJbms/JCOk0Q5soP/A3yPi2XrthNFYkcGWaG+BcR bbWCWEtcMjrslj01cl0hVi/qRtbnrwR+Z1TB8y1RROi/m0P8B7lnqsHsszHqwDCj u4NfhxOLxZEuGQu0N21kkbqfu3MyvVHtZMGgESS7GuOl7pRGFQqFFCFeAuVuyvcz INS1pSjm51MmP4YR4SKUMgFmZQuO7ygbvTjB7bsDc75vMqqbw5ZpZNATxEFHQS0H y5XH3Y/cvzq0I6xyhYfvf4qiGvyhCNgxhzfxJmk79NG+36nXuuQ+6dpyvg5Ym6G5 sIFMhWI/O2OBTuUgYaPe9HkAgpykcUlQHBV4AhU64cQWJDHqeiZX3z3auaWKSPJd 3Jr8ZBwiT5cUv1lVUMDha8Qn1iSGM+RwhepTUoTiQE8Mg2NwT3D31EPdZJ6HGygN QTSAVa8QVB7qFEmOhnpuKCuX70sVUDH3e11HBmBQyZJhNYMt8tvBPspRnAegbTMT xag+gMxOFuXGmF4Aol+SLCmAaHAllikBFjEk/2FPGrpoiVAAB4d1gKiqwa8JePUn NdH7yhugZzTEUk0e+Uj5hyhXug58HqGzetQAtE4uOrZG6XxbW5t+nXyy1i+8v5eM bcZ7ScU4cLfcNoZgB8IXiP7OnCizaN5hcaeEebltxpgRvxH+FHlZz4aWIIpEl+zN oLAWgcrd/r9xO+Fyw7lo =HOEN -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot _______________________________________________ Shorewall-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/shorewall-users
