Ping between two end hosts failing with ipsec tunnel mode with 3.10.28 linux kernel

From: Venkataratnam Naidu <hidden>
Date: 2014-07-02 10:07:57

Hi All,

This is my first post to netdev, if this is not the right forum to ask
questions/report issues. please divert me to the correct mail list.

I had configured ipsec tunnel between two routers(R1: 5.0.0.1 & R2:
5.0.0.2), when ipsec is enabled Tunnel is getting established but not
able to ping between two end hosts with 3.10.28 linux kernel. I didn't
see this behaviour with 2.6.28 linux kernel. Please let me know any
one observing the same behaviour on 3.10.28 kernel.
Without ipsec  ping is success from H1 1.0.0.50 to H2 2.0.0.50. If i
enable ipsec(tunnel is established  between two routers) and ping from
H1 1.0.0.50 to H2: 2.0.0.50 is failing.
Linux kernel on both routers are same.
root@OpenWrt:/# uname -a
Linux OpenWrt 3.10.28 #4 SMP PREEMPT Fri Jun 27 11:17:52 IST 2014 mips GNU/Linux
root@OpenWrt:/#
Below are the ip configs for two routers.
R1: 1.0.0.20 & 5.0.0.1     H1: 1.0.0.50 which is connected to R1
Routes on R1
root@OpenWrt:/# route
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
1.0.0.0         *               255.0.0.0       U     0      0        0 eth0
2.0.0.0         5.0.0.2         255.0.0.0       UG    0      0        0 eth1
5.0.0.0         *               255.0.0.0       U     0      0        0 eth1
root@OpenWrt:/#
R2: 5.0.0.2 & 2.0.0.20      H2: 2.0.0.50 which is connected to R2
Routes on R2
root@OpenWrt:/# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
1.0.0.0         5.0.0.1         255.0.0.0       UG    0      0        0 eth1
2.0.0.0         *               255.0.0.0       U     0      0        0 eth0
5.0.0.0         *               255.0.0.0       U     0      0        0 eth1
root@OpenWrt:/#

Regards,
Ratnam.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help