<div>Hi, thanks for your replies!!</div>
<div> </div>
<div>I'm a bit confused with the addresses, sorry...</div>
<div> </div>
<div>I have 2 ethernets in my vpn servers.</div>
<div> </div>
<div>This configuration file sample, is for one of the vpn servers, that's right? For the otherone, there should be changes, no??</div>
<div> </div>
<div>if my scenario had:<br> </div>
<div>LAN_1 ------ vpn server --- router adsl ------ internet---- router adsl ------- vpn server ----- LAN_2</div>
<div>ip_lan1 ip1_1 ip1_2 ip_r1 ip_pub1 ip_pub2 ip_r2 ip2_2 ip2_1 ip_lan2</div>
<div> </div>
<div>how would it be the configuration?</div>
<div> </div>
<div>what is: @leftid @rightid?? which addresses should be?</div>
<div> </div>
<div>Thanks in advance!</div>
<div> </div>
<div>Xavi.</div>
<div> </div>
<div><span class="gmail_quote">2007/3/7, Utkarsh Shah <<a href="mailto:utkarsh@elitecore.com">utkarsh@elitecore.com</a>>:</span>
<blockquote class="gmail_quote" style="PADDING-LEFT: 1ex; MARGIN: 0px 0px 0px 0.8ex; BORDER-LEFT: #ccc 1px solid"><br>> Hi, I have the following scenario, and I would like to create a vpn with<br>> natt suport.<br>
><br>> LAN_1 ------ vpn server --- router adsl ------ internet---- router adsl<br>> ----- vpn server ----- LAN_2<br>><br>> I've installed:<br>> openswan-2.4.7.tar.gz<<a href="http://www.openswan.org/download/openswan-2.4.7.tar.gz">
http://www.openswan.org/download/openswan-2.4.7.tar.gz</a>><br>><br>> I'm working with slackware 10.1 and kernel 2.16.12<br>><br>> I have to install the kernell natt patch??<br>><br>> Could someone help me with
ipsec.conf file? I've been searching the internet<br>> without any result...<br>><br>> Thanks.<br>><br>> Xavi<br>i have achieved above scenario with following changes it might not be<br>perfect solution...
<br>on adsl router apply portforwarding rules for UDP port 500 port 4500 and<br>proto esp(50) to your vpn server on both end<br><br>configure your ipsec.conf as below<br><br>conn net-to-net<br> left=<a href="http://10.0.1.2">
10.0.1.2</a><br> leftid=@leftid<br> leftsubnet=<a href="http://192.168.0.0/24">192.168.0.0/24</a><br> right=remoteserver(domain name or ip which will identify adsl router)<br> rightid=@rightid<br> rightsubnet=
<a href="http://192.168.1.0/24">192.168.1.0/24</a><br> authby=secret<br> auto=start<br><br>and your ipsec.secret as<br><br>@leftid @rightid : PSK "your preshared key"<br><br><br><br>Regards,<br>Utkarsh Shah
<br>_______________________________________________<br><a href="mailto:Users@openswan.org">Users@openswan.org</a><br><a href="http://lists.openswan.org/mailman/listinfo/users">http://lists.openswan.org/mailman/listinfo/users
</a><br>Building and Integrating Virtual Private Networks with Openswan:<br><a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
</a><br></blockquote></div><br>