Greetings,
I'm gradually replacing our aging BorderManager VPN's w/ Openswan and
Cisco.  I'm trying to overcome some routing issues with the new
configuration.  Here is the setup:

10.10.90.0/24===aa.bb.cc.187---aa.bb.cc.190...dd.ee.ff.33---dd.ee.ff.46===192.168.1.0/24

Left Network [Linux OpenSwan]	Site-to-Site VPN	Right Network [Cisco ASA 5505]
Public VPN IP: aa.bb.cc.187		<-->		Public VPN IP: dd.ee.ff.46
Internal Network: 10.10.90.0/24	<-->		Internal Network: 192.168.1.0/24
Openswan Internal IP: 10.10.90.3	<-->		Cisco Internal IP: 192.168.1.1

The tunnel is up, and:
I can ping from Cisco LAN (192.168.1.x) to Openswan server (10.10.90.3)
I can NOT ping from Cisco LAN to Openswan LAN

I can NOT ping from Openswan to Cisco (Anything)

Openswan route:
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
aa.bb.cc.184    *               255.255.255.248 U     0      0        0 eth1
192.168.1.0     *               255.255.255.0   U     0      0        0 eth1
10.10.90.0      *               255.255.255.0   U     0      0        0 eth0
10.10.90.0      *               255.255.255.0   U     0      0        0 eth1
link-local      *               255.255.0.0     U     0      0        0 eth0
loopback        *               255.0.0.0       U     0      0        0 lo
default         aa.bb.cc.190    0.0.0.0         UG    0      0        0 eth1

What other routes might I need on the Linux side?  The goal is to have
both LAN's communicate using any protocol.

I can post the Cisco config if needed.
Thanks in advance for any advice.

-Ben
---------------------------------------------------
PLUG-discuss mailing list - PLUG-discuss@lists.plug.phoenix.az.us
To subscribe, unsubscribe, or to change your mail settings:
http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss