<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.6000.16587" name=GENERATOR></HEAD>
<BODY>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>I have
done some of this in the past, it's not too difficult.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>Ideally all of your sites have static ips connected in
a mesh, this is typically the best</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>for
cost and speed, but sometimes your stuck with dynamic ips, which require
star.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>I have
a mix in my wan.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>This
is the general principal, modify to suit your needs, adding addition connection
details...</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>Essentially you do two things...</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>1)
Make your dynamic hosts start the tunnels with auto=start, and central host just
auto=add.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>2)
Tell your dynamic hosts that the central subnet is a larger all encompassing
subnet.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> This works because the routing
system will route to more specific routes when possible.</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>site1
ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site1</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site1 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site1 lan ip,
10.0.1.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> rightsourceip=<central lan
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.0.0/16</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>site2
ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site2</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site2 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site2 lan ip,
10.0.2.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> rightsourceip=<central lan
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.0.0/16</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>site3
ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site3</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site3 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site3 lan ip,
10.0.3.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> rightsourceip=<central lan
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.0.0/16</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>central ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site1</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<central lan
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.0.0/16</SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site1 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> rightsourceip=<site1 lan ip,
10.0.1.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site2</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<central lan
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.0.0/16</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site2 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> rightsourceip=<site2 lan ip,
10.0.2.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site3</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<central lan
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.0.0/16</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site3 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> rightsourceip=<site3 lan ip,
10.0.3.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>The
alternative to using an all encompassing subnet, is to make additional conns,
for example...</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>site1
ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site1-site2</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site1 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site1 lan ip,
10.0.1.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site1-site3</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site1 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site1 lan ip,
10.0.1.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>site2
ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site2-site1</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site2 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site2 lan ip,
10.0.2.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site2-site3</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site2 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site2 lan ip,
10.0.2.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>site3
ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site3-site1</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site3 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site3 lan ip,
10.0.3.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site3-site2</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<site3 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> leftsourceip=<site3 lan ip,
10.0.3.y></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=start</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>central ipsec.conf:</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site1-site2</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.2.0/24</SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site1 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site1-site3</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site1 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV></SPAN></FONT></DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site2-site1</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site2 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008><SPAN
class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site2-site3</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site2 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV></SPAN></FONT></DIV></SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site3-site1</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.1.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site3 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008><SPAN
class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>conn
site3-site2</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> left=<central public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
leftsubnet=10.0.2.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> right=<site3 public
ip></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008>
rightsubnet=10.0.3.0/24</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008> auto=add</SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN
class=927053719-31012008></SPAN></FONT> </DIV></SPAN></FONT></DIV></SPAN></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2><SPAN class=927053719-31012008>As you
can see the first is much cleaner and simpler if your network can handle
it.</SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV></SPAN></FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV>
<DIV align=left><FONT face=Arial size=2>Peter McGill</FONT></DIV>
<DIV><FONT face=Arial color=#0000ff size=2></FONT> </DIV><FONT face=Arial
size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial
size=2></FONT><FONT face=Arial size=2></FONT><FONT face=Arial size=2></FONT><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> users-bounces@openswan.org
[mailto:users-bounces@openswan.org] <B>On Behalf Of </B>Raimar
Grosse<BR><B>Sent:</B> January 31, 2008 9:10 AM<BR><B>To:</B>
users@openswan.org<BR><B>Subject:</B> [Openswan Users] star topology
vpn<BR></FONT><BR></DIV>
<DIV></DIV>Hi,<BR><BR>IŽd like to build a VPN with a star topology and
openswan.<BR>There should be one server with a static IP wich manages the VPN
connection. Serveral routers should start the VPN connection with this server
when connecting to the internet. Some of the IPs of the routers will be static
but some will be dynamical. Behind the router there are local networks with IP
ranges 10.0.x.y, for example we have the three networks 10.0.1.y, 10.0.2.y and
10.0.3.y, their gateway builds a connection with the VPN server.<BR><BR>What I
want is the possibility to get connections from a computer of network 10.0.1.y
to one of network 10.0.3.y for example. Is this possible with openswan when
some of the external router IPs can be dynamic.<BR><BR>Does anybody has build
such a network ? Would be nice if you have some suggestions<BR><BR>Raimar<BR>
<P>
<HR SIZE=1>
Beginnen Sie den Tag mit den neuesten Nachrichten. <A
href="http://de.rd.yahoo.com/evt=41213/*http://de.yahoo.com/set"
target=_new>Machen Sie Yahoo! zu Ihrer
Startseite!</A></BLOCKQUOTE></BODY></HTML>