I have two OpenWRT routers set up with an IPSec VPN tunnel between them. The tunnel is successfully established, but the traffic is not passing through the tunnel, and I'm unable to ping local devices on the other side.
Here is my network setup:
OpenWRT Router (Youssef) -> Router with DMZ -> Internet -> OpenWRT Router (Martin)
Router Configurations
Youssef's Router - Route Config:
root@turris:/etc/swanctl/conf.d# ip route show
default via 192.168.1.1 dev eth2
10.10.90.0/24 via 10.0.0.1 dev vti1
192.168.1.0/24 dev eth2 proto kernel scope link src 192.168.1.26
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
Martin's Router - Route Config:
root@turris:/etc/swanctl/conf.d# ip route show
default via 62.155.x.y dev pppoe-wan proto static
62.155.x.y dev pppoe-wan proto kernel scope link src 80.133.x.y
192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.1
IPSec Configuration (Youssef's Router)
connections {
martinyoussef {
version = 2
local_addrs = %any
remote_addrs = X.X.X.X
local {
id = @youssef
auth = psk
}
remote {
id = @Martin
auth = psk
}
children {
net {
local_ts = 192.168.2.0/24
remote_ts = 192.168.1.0/24
start_action = start
mode = tunnel
}
}
proposals = aes256gcm16-sha512-modp4096
}
}
secrets {
ike-martinyoussef {
secret = "secrekey"
}
}
IPSec Configuration (Martin's Router)
connections {
martinyoussef {
version = 2
local_addrs = %any
remote_addrs = X.X.X.X
local {
id = @Martin
auth = psk
}
remote {
id = @youssef
auth = psk
}
children {
net {
local_ts = 192.168.1.0/24
remote_ts = 192.168.2.0/24
start_action = start
mode = tunnel
}
}
proposals = aes256gcm16-sha512-modp4096
}
}
secrets {
ike-martinyoussef {
secret = "secrekey"
}
}
Problem:
The VPN IPSec tunnel is successfully established between the two routers, but traffic is not passing through the tunnel, and I cannot ping devices on the remote side.
Asked by Youssef ARRASSEN
(1 rep)
Mar 6, 2025, 07:37 AM
Last activity: Mar 6, 2025, 08:49 AM
Last activity: Mar 6, 2025, 08:49 AM