<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-8-i">
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META NAME="Generator" CONTENT="MS Exchange Server version 6.0.6603.0">
<TITLE>Re: [Openswan Users] Using klips with routing</TITLE>
</HEAD>
<BODY dir=ltr>
<DIV>Hi </DIV>
<DIV> </DIV>
<DIV>I have another tunnel running over the ipsec tunnel so i want to
keep the main routing table as is (ipsec inserts into it the rule 0.0.0.0/1
via %defult_gateway dev ipsec0).</DIV>
<DIV> </DIV>
<DIV>Thanks for any help </DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV><FONT size=2>-----הודעה מקורית----- <BR><B>מאת:</B> Paul Wouters
[mailto:paul@xelerance.com] <BR><B>נשלח:</B> א 11/20/2005 5:48 PM
<BR><B>אל:</B> moses reuben <BR><B>עותק לידיעה:</B> users@openswan.org
<BR><B>נושא:</B> Re: [Openswan Users] Using klips with
routing<BR><BR></FONT></DIV>
<P><FONT size=2>On Sun, 20 Nov 2005, moses reuben wrote:<BR><BR>> My
question is how to cancel the changes inserted into the main routing table by
the _startklips script, when<BR>> I tried to remove the call to the tncfg
code and the ifconfig command I got an error when trying to load up a<BR><BR>I
dont see a valid reason for doing this.<BR><BR>> tunnel (using ipsec auto
-up tunnel) - "We cannot identify ourselves as either end of this
connection".<BR><BR>That is when openswan cannot figure out whether it is left
or right of the connection definition. Eg if<BR>you use left=%defaultroute and
right=%any, you get that error, if you you have left and right as
IP<BR>addresses and those IP addresses do not appear on any interfaces (or are
added uses advanced routing<BR>instead of interface
aliases)<BR><BR>Paul<BR><BR></FONT></P></BLOCKQUOTE>
</BODY>
</HTML>