1

I have a Strongswan IKEv2 server and I can connect to it from Windows 10 using built in VPN client but I cannot ping the subnet behind the vpn server. It only works when I manually add a route to the subnet with route add 192.168.12.0 mask 255.255.255.0 10.100.0.1. Basically the same issue that strongSwan server with Windows 7 clients doesn't route traffic.

Is it possible to automate it from the server side (i.e. I don't have to create a bat file on every client desktop to add the route)?

Henno
  • 1,056
  • 5
  • 19
  • 33

2 Answers2

1

In particular we cannot push routes to the client using strongSwan. Instead you can mention required subnets in rightsubnet and leftsubnet to route traffic through the Tunnel. Then connected clients will route traffic to the destinated subnets through gateway.

Samudrala Prasad
  • 74
  • 2
0

put an iptables rule to mark the packets belonging to the vpn session and then an iproute2 rule to divert market packets to a different table containing the routes you want.

Vins Vilaplana
  • 21
  • 1