<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1615" name=GENERATOR></HEAD>
<BODY>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>hello,
</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>i want to know if
it's possible to configure a virtual ip address in the roadwarrior with
x509 , i explain our schema:</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>rw
(192.168.1.15)-----(192.168.1.1)adsl router(public ip)-------(public ip)eth1
server openswan/firewall (10.x.x.x)</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>the server's file
ipsec.conf is :</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>config
setup<BR>
interfaces="ipsec0=eth1"<BR>
nat_traversal=yes<BR>
forwardcontrol=yes<BR>
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16<BR>
uniqueids=yes</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>conn
%default<BR>
keyingtries=0<BR>
compress=yes<BR>
disablearrivalcheck=no<BR>
authby=rsasig<BR>
leftrsasigkey=%cert<BR>
rightrsasigkey=%cert</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>conn
roadwarrior-net<BR>
type=tunnel<BR>
left=x.x.x.x</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2>
leftsubnet=10.0.0.0/16<BR>
leftcert=esmadlx02vpn.selftrade.es.pem<BR>
right=%any<BR>
rightcert=self_prueba_xp.selftrade.es.pem<BR>
rightsubnet=vhost:%no,%priv<BR>
rightid="C=ES,S=Madrid,L=Madrid,O=Self Trade
Bank,CN=self_prueba_xp.selftrade.es,E=alfonso.viso@selftrade.com"<BR>
auto=add<BR>
pfs=yes<BR></FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>and the
roadwarrior's file ipsec.conf is:</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>conn
roadwarrior-net<BR> left=%any<BR> right=81.93.214.114<BR> rightsubnet=10.105.0.0/255.255.0.0<BR> rightca="................................................."<BR> network=auto<BR> auto=start<BR> pfs=yes </FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>with this
configuration the connection is ok, the tunnel is up and the roadwarrior
connect to the private network with 192.168.1.15.</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>now, i want to
configure a second ip address in the roadwarrior, virtual ip, for example
192.168.200.x, for use it to connect.</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>is it
possible?</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial size=2>thanks in advanced
and please forgive me for my english.</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2>Regards</FONT></SPAN></DIV>
<DIV><SPAN class=648080114-13112008><FONT face=Arial
size=2>Alfonso.</FONT></SPAN></DIV><hr/> <p> Ce message contient des informations confidentielles ou appartenant à Boursorama et est établi à l'intention exclusive de ses destinataires. Toute divulgation, utilisation, diffusion ou reproduction (totale ou partielle) de ce message, ou des informations qu'il contient, doit être préalablement autorisée. Tout message électronique est susceptible d'altération et son intégrité ne peut être assurée.<br/> Boursorama décline toute responsabilité au titre de ce message s'il a été modifié ou falsifié. Si vous n'êtes pas destinataire de ce message, merci de le détruire immédiatement et d'avertir l'expéditeur de l'erreur de distribution et de la destruction du message. </p> <hr/> <p> This e-mail contains confidential information or information belonging to Boursorama and is intended solely for the addressees. The unauthorised disclosure, use, dissemination or copying (either whole or partial) of this e-mail, or any information it contains, is prohibited. E-mails are susceptible to alteration and their integrity cannot be guaranteed. Boursorama shall not be liable for this e-mail if modified or falsified. If you are not the intended recipient of this e-mail, please delete it immediately from your system and notify the sender of the wrong delivery and the mail deletion. </p> <hr/>
</body>
</HTML>