[Openswan Users] OpenSwan compatible with other ipsec software?

Denny Bortfeldt d.bortfeldt at babiel.com
Tue Dec 2 09:58:15 EST 2014


Hey,

thank you very much for this information.
This helps me a lot.

Greetings,
Denny

> -----Ursprüngliche Nachricht-----
> Von: users-bounces at lists.openswan.org [mailto:users-
> bounces at lists.openswan.org] Im Auftrag von Michael Schwartzkopff
> Gesendet: Dienstag, 2. Dezember 2014 15:50
> An: users at lists.openswan.org
> Betreff: Re: [Openswan Users] OpenSwan compatible with other ipsec
> software?
> 
> Am Dienstag, 2. Dezember 2014, 14:37:24 schrieb Denny Bortfeldt:
> > Hello everyone,
> >
> > I've got a little question about openswan.
> > There are "left"- and "right"-settings you've to set in the
> > openswan-configuration. E.g.: left=4.3.2.1
> > leftsubnet=10.1.0.0/24
> > leftid=@a.example.com
> > leftrsasigkey=0sAQNe...
> > leftnexthop=%defaultroute
> > right=1.2.3.4
> > rightsubnet=10.2.0.0/24
> > rightid=@b.example.com
> > rightrsasigkey=7xoprFh...
> > rightnexthop=%defaultroute
> > auto=start
> >
> > So now my question:
> > Let us assume our VPN-partner use racoon to establish an IPSec tunnel.
> > Do the partner or we have to set special parameters? Who is the left
> > one and who is the right one or is this not important? Thank you very
> > much in advance and sorry for the dump question but I couldn't find
> > any useful stuff on google :-\
> 
> No. the IKE protocol does not know about "right" and "left". it is only used
> to identify the connection on the local machine. So you can connect to a
> racoon machine. It is only important that your machine can identify itself
> with one side: Either right or left.
> 
> Mit freundlichen Grüßen,
> 
> Michael Schwartzkopff
> 
> --
> [*] sys4 AG
> 
> http://sys4.de, +49 (89) 30 90 46 64, +49 (162) 165 0044 Franziskanerstraße 15,
> 81669 München
> 
> Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
> Vorstand: Patrick Ben Koetter, Marc Schiffbauer
> Aufsichtsratsvorsitzender: Florian Kirstein


More information about the Users mailing list