Have several sites, one of them acts as intermediary router between two:
- AWS VPC (10.10.0.0/24)
- Libreswan VPN Server (10.20.0.0/24)
- Mikrotik VPN Router (10.30.0.0/24)
host1 resides at AWS VPC,
host2 is connected to Mikrotik
VPN's are up, each connection is working separately, statuses look fine.
host2 pings host1, packets arrive through libreswan to host1, host1 replies, all packets arrive at libreswan, but are not passed to host2. Also, packets initiated from host2 are able to reach libreswan, but are not passed to host1. I suppose, that all is stateless for ipsec and is the same problem.
iptables nat (manual config):
-A POSTROUTING -j ACCEPT -d 10.10.0.0/24 -A POSTROUTING -j ACCEPT -d 10.20.0.0/24
iptables filter (manual config):
-A FORWARD -j ACCEPT
routing table @ libreswan (ip route, added by libreswan):
10.10.0.0/24 dev eth0 scope link mtu 1436 10.20.0.0/24 dev eth0 scope link mtu 1436
Similar connections with many combinations to other sites works fine in any way - difference is in AWS-Libreswan VPN connection.
Is there something i am missing? Where should i look?