<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
<title></title>
</head>
<body bgcolor="#ffffff" text="#000000">
This did the trick... so far. Worked until I tried accessing larger web
pages. I got MTU need to frag ICMP packages and the connection failed.
I looked around the net and there had been pages telling to use
uverwritemtu in ipsec.conf. This though doesn't work with netkey it
seems. I did now use ifconfig to limit the MTU which seems to work.<br>
<br>
Is there a better option for this? It would be annoying to check every
laptop hooked up to have not a broken MTU setup.<br>
<br>
Paul Wouters wrote:
<blockquote
cite="mid:Pine.LNX.4.64.0708270837590.6545@newtla.xelerance.com"
type="cite">
<pre wrap="">On Sun, 26 Aug 2007, Roland Plüss wrote:
</pre>
<blockquote type="cite">
<pre wrap="">conn openswan-roadwarrior
left=192.168.3.2
leftsubnet=192.168.1.0/24
</pre>
</blockquote>
<pre wrap=""><!---->
</pre>
<blockquote type="cite">
<pre wrap="">Hence in my routing table on the laptop I have correctly set to route
through the tunnel if the destination is 192.168.1.0/24. But if an
internet address is the destination this route doesn't hold anymore and
the default route is used which goes directly to the access point which
dissallows this.
How can configuration OpenSwan to become the default route on my laptop
so ANY traffic is send through the tunnel and not only the one to my
internal network?
</pre>
</blockquote>
<pre wrap=""><!---->
use a left/rightsubnet of 0.0.0.0/0
Paul
</pre>
</blockquote>
</body>
</html>