netdev - Ping between two end hosts failing with ipsec tunnel mode with 3.10.28 linux kernel

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <CANgMM_CDxhXxDy=zkixPMuRwQ8aMFB_H7VgyBNtKLD5koZuT6g@mail.gmail.com>
Date:	Wed, 2 Jul 2014 15:37:55 +0530
From:	Venkataratnam Naidu <ratnameee@...il.com>
To:	netdev <netdev@...r.kernel.org>
Subject: Ping between two end hosts failing with ipsec tunnel mode with
 3.10.28 linux kernel

Hi All,

This is my first post to netdev, if this is not the right forum to ask
questions/report issues. please divert me to the correct mail list.

I had configured ipsec tunnel between two routers(R1: 5.0.0.1 & R2:
5.0.0.2), when ipsec is enabled Tunnel is getting established but not
able to ping between two end hosts with 3.10.28 linux kernel. I didn't
see this behaviour with 2.6.28 linux kernel. Please let me know any
one observing the same behaviour on 3.10.28 kernel.
Without ipsec  ping is success from H1 1.0.0.50 to H2 2.0.0.50. If i
enable ipsec(tunnel is established  between two routers) and ping from
H1 1.0.0.50 to H2: 2.0.0.50 is failing.
Linux kernel on both routers are same.
root@...nWrt:/# uname -a
Linux OpenWrt 3.10.28 #4 SMP PREEMPT Fri Jun 27 11:17:52 IST 2014 mips GNU/Linux
root@...nWrt:/#
Below are the ip configs for two routers.
R1: 1.0.0.20 & 5.0.0.1     H1: 1.0.0.50 which is connected to R1
Routes on R1
root@...nWrt:/# route
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
1.0.0.0         *               255.0.0.0       U     0      0        0 eth0
2.0.0.0         5.0.0.2         255.0.0.0       UG    0      0        0 eth1
5.0.0.0         *               255.0.0.0       U     0      0        0 eth1
root@...nWrt:/#
R2: 5.0.0.2 & 2.0.0.20      H2: 2.0.0.50 which is connected to R2
Routes on R2
root@...nWrt:/# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
1.0.0.0         5.0.0.1         255.0.0.0       UG    0      0        0 eth1
2.0.0.0         *               255.0.0.0       U     0      0        0 eth0
5.0.0.0         *               255.0.0.0       U     0      0        0 eth1
root@...nWrt:/#

Regards,
Ratnam.
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html