I have server connected with remote LAN1 over IPSec tunnel. Now I want to setup second tunnel to LAN2 which is connected to router in LAN1, so I need to create Ipsec tunnel inside existing ipsec tunnel:
LAN0 -- server -- internet -- GW1 -- LAN1 -- GW2 -- LAN2 ====== IPSEC1 ===== ============ IPSEC2 ================
IPSEC1 is working fine, I can ping GW2, but IPSEC2 is not working. I can't change GW1 configuration, but I have full control over server and GW2. In log from server, I see:
sending packet: from (server) to (GW2) (420 bytes) sending retransmit 2 of request message ID 0, seq 1
The same is on GW2. I can ping both sides, but IPSec packets are not transmitted. ipsec.conf on server:
left=%defaultroute leftid=serverip(from LAN0) leftsubnet=LAN0/24 right=GW2 rightsubnet=LAN2/24
left=GW2 leftid=GW2 leftsubnet=LAN2/24 right=server(from LAN0) rightid=%any rightsubnet=LAN0/24
What is wrong ?