Sample Header Ad - 728x90

Ipsec vpn connected but cant ping the other router

0 votes
0 answers
37 views
I have two OpenWRT routers set up with an IPSec VPN tunnel between them. The tunnel is successfully established, but the traffic is not passing through the tunnel, and I'm unable to ping local devices on the other side. Here is my network setup: OpenWRT Router (Youssef) -> Router with DMZ -> Internet -> OpenWRT Router (Martin) Router Configurations Youssef's Router - Route Config:
root@turris:/etc/swanctl/conf.d# ip route show
default via 192.168.1.1 dev eth2 
10.10.90.0/24 via 10.0.0.1 dev vti1 
192.168.1.0/24 dev eth2 proto kernel scope link src 192.168.1.26 
192.168.2.0/24 dev br-lan proto kernel scope link src 192.168.2.1
Martin's Router - Route Config:
root@turris:/etc/swanctl/conf.d# ip route show
default via 62.155.x.y dev pppoe-wan proto static 
62.155.x.y dev pppoe-wan proto kernel scope link src 80.133.x.y 
192.168.1.0/24 dev br-lan proto kernel scope link src 192.168.1.1
IPSec Configuration (Youssef's Router) connections { martinyoussef { version = 2 local_addrs = %any remote_addrs = X.X.X.X local { id = @youssef auth = psk } remote { id = @Martin auth = psk } children { net { local_ts = 192.168.2.0/24 remote_ts = 192.168.1.0/24 start_action = start mode = tunnel } } proposals = aes256gcm16-sha512-modp4096 } } secrets { ike-martinyoussef { secret = "secrekey" } } IPSec Configuration (Martin's Router) connections { martinyoussef { version = 2 local_addrs = %any remote_addrs = X.X.X.X local { id = @Martin auth = psk } remote { id = @youssef auth = psk } children { net { local_ts = 192.168.1.0/24 remote_ts = 192.168.2.0/24 start_action = start mode = tunnel } } proposals = aes256gcm16-sha512-modp4096 } } secrets { ike-martinyoussef { secret = "secrekey" } } Problem: The VPN IPSec tunnel is successfully established between the two routers, but traffic is not passing through the tunnel, and I cannot ping devices on the remote side.
Asked by Youssef ARRASSEN (1 rep)
Mar 6, 2025, 07:37 AM
Last activity: Mar 6, 2025, 08:49 AM