remote box
63.147.76.30 netmask 0xffffffc0 broadcast 63.147.76.63
192.168.241.15 netmask 0xffffff00 broadcast 192.168.241.255
ike esp from 192.168.0.0/16 to 10.50.3.0/24 peer 71.196.227.124
ike esp from 63.147.76.30 to 10.50.3.0/24 peer 71.196.227.124
ike esp from 63.147.76.30 to 71.196.227.124
# ipsecctl -sf
flow esp in from 10.50.3.0/24 to 192.168.0.0/16 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type use
flow esp out from 192.168.0.0/16 to 10.50.3.0/24 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type require
flow esp in from 10.50.3.0/24 to 63.147.76.30 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type use
flow esp out from 63.147.76.30 to 10.50.3.0/24 peer 71.196.227.124 srcid 63.147.76.30/32 dstid 71.196.227.124/32 type require
# netstat -rnf encap
Routing tables
Encap:
Source Port Destination Port Proto SA(Address/Proto/Type/Direction)
10.50.3/24 0 192.168/16 0 0 71.196.227.124/esp/use/in
192.168/16 0 10.50.3/24 0 0 71.196.227.124/esp/require/out
10.50.3/24 0 63.147.76.30/32 0 0 71.196.227.124/esp/use/in
63.147.76.30/32 0 10.50.3/24 0 0 71.196.227.124/esp/require/out
local box:
71.196.227.124 netmask 0xfffffe00 broadcast 255.255.255.255
10.50.3.2 netmask 0xffffff00 broadcast 10.50.3.255
# ipsecctl -sf
flow esp in from 192.168.0.0/16 to 10.50.3.0/24 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type use
flow esp out from 10.50.3.0/24 to 192.168.0.0/16 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type require
flow esp in from 63.147.76.30 to 10.50.3.0/24 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type use
flow esp out from 10.50.3.0/24 to 63.147.76.30 peer 63.147.76.30 srcid 71.196.227.124/32 dstid 63.147.76.30/32 type require
# netstat -rnf encap
Routing tables
Encap:
Source Port Destination Port Proto SA(Address/Proto/Type/Direction)
192.168/16 0 10.50.3/24 0 0 63.147.76.30/esp/use/in
10.50.3/24 0 192.168/16 0 0 63.147.76.30/esp/require/out
63.147.76.30/32 0 10.50.3/24 0 0 63.147.76.30/esp/use/in
10.50.3/24 0 63.147.76.30/32 0 0 63.147.76.30/esp/require/out