Hi

What does the ipsec.conf entry on the Office gateway for the Home gateway look like?
IP range of Home network?
Are you trying to use the Home gateway as a relay to get into the Office net from other locations than from Home network?
Do you have any NAT rules involved?

"ipsecctl -s all" on Office and Home gateways before and after connection is established could shed some light.

/m

Alexey Vatchenko wrote:

The problem is when home gateway establishes IPSec tunnel with office gateway, computers from office network cannot connect to office gateway (but they still can get Internet through the gateway).

Here is what i do:

Office network: 192.168.0.0/24
ipsec.conf: ike passive esp from 192.168.0.0/24 to any local egress dstid [EMAIL PROTECTED] psk xxx

Home
ipsec.conf: ike dynamic esp from any to 192.168.0.0/24 peer OFFICE_EXTERNAL_IP srcid [EMAIL PROTECTED] psk xxx

So, please, shed some light on what i do wrong.

Reply via email to