<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
assuming "ip1_1 ip1_2" is vpnserver1 and another is vpnserver2<br>
<br>
at vpnserver1<br>
conn vpnserver1-to-vpnserver2<br>
left=ip1_2<br>
leftid=@ip1_2<br>
leftsubnet=ip_lan1<br>
leftnexthop=ip_r1 (may not be needed in new version)<br>
right=ip_pub2<br>
rightid=@ip2_2<br>
rightsubnet=ip_lan2<a href="http://192.168.1.0/24"></a><br>
authby=secret<br>
auto=start<br>
<br>
at vpnserver2<br>
conn vpnserver2-to-vpnserver1<br>
left=ip2_2<br>
leftid=@ip2_2<br>
leftsubnet=ip_lan2<br>
leftnexthop=ip_r2 (may not be needed in new version)<br>
right=ip_pub1<br>
rightid=@ip1_1<br>
rightsubnet=ip_lan1<br>
authby=secret<br>
auto=start<br>
<br>
<br>
Regards,<br>
Utkarsh Shah<br>
<br>
Xavi Deop wrote:
<blockquote
cite="mid22fa9c0b0703070144j4515a2eeg9e6465e30fb3ca22@mail.gmail.com"
type="cite">
<div>Hi, thanks for your replies!!</div>
<div> </div>
<div>I'm a bit confused with the addresses, sorry...</div>
<div> </div>
<div>I have 2 ethernets in my vpn servers.</div>
<div> </div>
<div>This configuration file sample, is for one of the vpn servers,
that's right? For the otherone, there should be changes, no??</div>
<div> </div>
<div>if my scenario had:<br>
</div>
<div>LAN_1 ------ vpn server --- router adsl ------ internet----
router adsl ------- vpn server ----- LAN_2</div>
<div>ip_lan1 ip1_1 ip1_2 ip_r1
ip_pub1 ip_pub2 ip_r2 ip2_2 ip2_1 ip_lan2</div>
<div> </div>
<div>how would it be the configuration?</div>
<div> </div>
<div>what is: @leftid @rightid?? which addresses should be?</div>
<div> </div>
<div>Thanks in advance!</div>
<div> </div>
<div>Xavi.</div>
<div> </div>
<div><span class="gmail_quote">2007/3/7, Utkarsh Shah <<a
href="mailto:utkarsh@elitecore.com">utkarsh@elitecore.com</a>>:</span>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0px 0px 0px 0.8ex; padding-left: 1ex;"><br>
> Hi, I have the following scenario, and I would like to create a
vpn with<br>
> natt suport.<br>
><br>
> LAN_1 ------ vpn server --- router adsl ------ internet---- router
adsl<br>
> ----- vpn server ----- LAN_2<br>
><br>
> I've installed:<br>
> openswan-2.4.7.tar.gz<<a
href="http://www.openswan.org/download/openswan-2.4.7.tar.gz">
http://www.openswan.org/download/openswan-2.4.7.tar.gz</a>><br>
><br>
> I'm working with slackware 10.1 and kernel 2.16.12<br>
><br>
> I have to install the kernell natt patch??<br>
><br>
> Could someone help me with ipsec.conf file? I've been searching
the internet<br>
> without any result...<br>
><br>
> Thanks.<br>
><br>
> Xavi<br>
i have achieved above scenario with following changes it might not be<br>
perfect solution...
<br>
on adsl router apply portforwarding rules for UDP port 500 port 4500 and<br>
proto esp(50) to your vpn server on both end<br>
<br>
configure your ipsec.conf as below<br>
<br>
conn net-to-net<br>
left=<a href="http://10.0.1.2">
10.0.1.2</a><br>
leftid=@leftid<br>
leftsubnet=<a href="http://192.168.0.0/24">192.168.0.0/24</a><br>
right=remoteserver(domain name or ip which will identify adsl
router)<br>
rightid=@rightid<br>
rightsubnet=
<a href="http://192.168.1.0/24">192.168.1.0/24</a><br>
authby=secret<br>
auto=start<br>
<br>
and your ipsec.secret as<br>
<br>
@leftid @rightid : PSK "your preshared key"<br>
<br>
<br>
<br>
Regards,<br>
Utkarsh Shah
<br>
_______________________________________________<br>
<a href="mailto:Users@openswan.org">Users@openswan.org</a><br>
<a href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users
</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a
href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
</a><br>
</blockquote>
</div>
<br>
</blockquote>
<br>
</body>
</html>