<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
Hi !<br> If it is a point-to-point ( host-to-host ) vpn tunnel then your rightsubnets are going to be a /32 and hence unique for host1.1 and host1.2 pair and host2.1 and 2.2 pair.<br>Ex:<br>host1.1<br>left={host1.1 public ip addr }<br>leftsubnet=1.1.1.1/32<br>right={ubuntu public ip addr }<br>rightsubnet=1.1.1.2/32<br><br>host1.2<br>left={host1.2 public ip addr }<br>leftsubnet=1.1.1.2/32<br>right={ubuntu public ip addr }<br>rightsubnet=1.1.1.1/32<br><br>ubuntu<br>conn host1.1<br>left={ubuntu public ip addr }<br>leftsubnet=1.1.1.2/32<br>right={host1.1 public ip addr }<br>rightsubnet=1.1.1.1/32<br><br>conn host1.2<br>left={ubuntu public ip addr }<br>leftsubnet=1.1.1.1/32<br>right={host1.2 public ip addr }<br>rightsubnet=1.1.1.2/32<br><br>This way you will have<br>1.1.1.1/32<-->host1.1<-->ubuntu<-->host1.2<-->1.1.1.2/32<br> <br> Hope that helps.<br><br><span style="font-family: Tahoma,Helvetica,Sans-Serif; font-style: italic; font-weight: bold;">-<span style="font-family: Times New Roman,Times,Serif;"> Simon Charles - </span></span><br><br><br><br><br><hr id="stopSpelling">From: bach@mbconnectline.de<br>To: users@lists.openswan.org<br>Date: Wed, 14 Jan 2009 14:35:52 +0100<br>Subject: [Openswan Users] point-to-point connection<br><br>
<title>Nachricht</title>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial">Hello
list,</font></span></div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial"></font></span> </div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial">I have a problem
with creating a connection as shown as follows:</font></span></div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial"></font></span> </div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial">host1.1
-------------------
-------------------------- host1.2 </font></span></div>
<div><span class="EC_405405912-14012009"> <font size="2" face="Arial">
| |</font></span></div>
<div><span class="EC_405405912-14012009"> |----
UBUNTU-VPN-SERVER -----|</span></div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial">
|
|</font></span></div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial"><span class="EC_405405912-14012009"><font size="2" face="Arial">host2.1
-------------------
</font></span>
-------------------------- host2.2</font></span></div>
<div><span class="EC_405405912-14012009"><font size="2" face="Arial"></font></span> </div>
<div class="EC_Section1">
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009">I want
to configure an UBUNTU-VPN-Server (with only one network-hardware ---> i use
virtual interfaces/lans) so that host1.1 can log in via vpn and host 1.2 can log
in via vpn.<br>Both hosts should meat each other in the Servers virtual LAN1.
Host2.1 and host 2.2 should meat each other in the virtual LAN2. The 1.x hosts
should not be able to ping the 2.x hosts. </span></font></p>
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009">I
wanted to solve that probleme with interface-forwarding. when host1.1 logs in he
gets ipsec0 when host1.2 logs in he gets ipsec1 BUT there is only one interface
for both connections.and neither host1.1 nor host1.2 are getting an ip from the
vpn-server. there are only the entries in the routing-table. But what if the
subnet of host1.1 and host 1.2 have the same netadress? there will be
adressconflicts in the routing-table.... Thats because I wanted to solve that
problem via interface-forwarding BUT as already mentioned ipsec with openswan
does not build extra interfaces for each connection.</span></font></p>
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009">Has
anybody who understood what i want (sorry for my bad english.. :) an idea how
reach the <font size="3" face="Times New Roman">assembly
above?</font></span></font></p>
<p class="EC_MsoNormal"><font size="3" face="Times New Roman"><span class="EC_405405912-14012009"></span></font> </p>
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009">thanx
for ya help,</span></font></p>
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009">with
best regards from germany bavaria (OKTOBERFEST),</span></font></p>
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009"></span></font> </p>
<p class="EC_MsoNormal"><font size="2" face="Arial"><span class="EC_405405912-14012009">joe</span></font></p>
<p class="EC_MsoNormal"><font size="2" face="Arial"></font> </p>
<p class="EC_MsoNormal">Technikum:</p>
<p class="EC_MsoNormal"> </p>
<p class="EC_MsoNormal">MB connect line </p>
<p class="EC_MsoNormal">Fernwartungssysteme GmbH</p>
<p class="EC_MsoNormal">Winnettener Str. 5</p>
<p class="EC_MsoNormal">D-91550 Dinkelsbühl</p>
<p class="EC_MsoNormal">Tel.: 0049 9851 582529 84</p>
<p class="EC_MsoNormal">Fax: 0049 9851 582529 99</p>
<p class="EC_MsoNormal"> </p>
<p class="EC_MsoNormal"> </p>
<p class="EC_MsoNormal">Stammhaus:</p>
<p class="EC_MsoNormal"> </p>
<p class="EC_MsoNormal">MB connect line</p>
<p class="EC_MsoNormal">Fernwartungssysteme GmbH</p>
<p class="EC_MsoNormal">Raiffeisenstrasse 4</p>
<p class="EC_MsoNormal">D-74360 Ilsfeld</p>
<p class="EC_MsoNormal">Fon: 0049 7062 9178788</p>
<p class="EC_MsoNormal">Fax: 0049 7062 9178792</p>
<p class="EC_MsoNormal"> </p>
<p class="EC_MsoNormal"> </p>
<p class="EC_MsoNormal">Sitz der Gesellschaft: D-74360 Ilsfeld</p>
<p class="EC_MsoNormal">Ust. Id. Nummer: DE185259018</p>
<p class="EC_MsoNormal">Registergericht: Stuttgart Germany HRB106261</p>
<p class="EC_MsoNormal">Geschäftsführer: Werner Belle, Siegfried Müller</p></div>
<div> </div></body>
</html>