Ubuntu 上建了一个 L2TP/IPSec，能拨通，但是拨通后不能访问任何网站，请问怎么排插原因？

[lichao]

[alexrezit]

ping 一下网站? 转发没设置好?

[lichao]

@alexrezit
拨通后可以 ping 通服务器 IP 地址，但是 ping 不通任何其它 IP 地址

不太懂细节，请问转发应该在哪里设置？

参照的这篇文章，http://safesrv.net/setup-l2tp-over-ipsec-to-authenticate-off-freeradius-on-ubuntu-11-10/

同时配合了 FreeRADIUS，用户名和密码保存在 FreeRADIUS 里。

[alexrezit]

@lichao
目测 iptables 没配好.

[lichao]

@alexrezit 我猜也是，请问怎么解决？不太懂 iptables

[alexrezit]

@lichao
iptables -t nat -A POSTROUTING -s x.x.x.x/24 -o eth0 -j
大概这样? x.x.x.x 换成你自己的.

[alexrezit]

iptables -t nat -A POSTROUTING -s x.x.x.x/24 -o eth0 -j MASQUERADE

[alexrezit]

你可以 -L 一下看看哪里不对.

[lichao]

@alexrezit

root@li471-142:~# iptables -L
Chain INPUT (policy ACCEPT)
target prot opt source destination

Chain FORWARD (policy ACCEPT)
target prot opt source destination
ACCEPT all -- anywhere anywhere state RELATED,ESTABLISHED

Chain OUTPUT (policy ACCEPT)
target prot opt source destination

[ShadowStar]

先查一下本地和服务器的路由

[lichao]

@ShadowStar
@alexrezit

多谢各位，搞定了

For some reason openswan does not start correctly after reboot, so I put the following lines in my /etc/rc.local

iptables --table nat --append POSTROUTING --jump MASQUERADE
echo 1 > /proc/sys/net/ipv4/ip_forward
for each in /proc/sys/net/ipv4/conf/*
do
echo 0 > $each/accept_redirects
echo 0 > $each/send_redirects
done
/etc/init.d/ipsec restart