I found that the book<<<i>Building and Integrating Virtual Private Networks with Openswan>> </i>,page 91, said that we can use a host name in left= ... and right=.... however,Even after I set USE_DYNAMICDNS?=true in Makefile.inc and compile openswan again,When I add a connection with left=<a href="http://somehost.dyndns.org">somehost.dyndns.org</a>,it still failed,saying that :<br>
<br>022 connection must specify host IP address for our side<br>037 attempt to load incomplete connection<br><br><br><div class="gmail_quote">2009/4/13 Marcus Carlson <span dir="ltr"><<a href="mailto:marcus@mejlamej.nu">marcus@mejlamej.nu</a>></span><br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">Hi,<br>
<br>
If I'm correct then OpenVPN would allow you to do this. But of course<br>
the roadwarriors have to use a different client then.<br>
<br>
Marcus<br>
<br>
Curu Wong skrev:<br>
<div class="im">> Got! Thanks.<br>
> then,is there a way for roadwarrior to connect to subnetB ? Should I<br>
> use dynamic dns or something like that?<br>
><br>
</div>> 2009/4/13 Paul Wouters <<a href="mailto:paul@xelerance.com">paul@xelerance.com</a> <mailto:<a href="mailto:paul@xelerance.com">paul@xelerance.com</a>>><br>
<div class="im">><br>
> On Mon, 13 Apr 2009, Curu Wong wrote:<br>
><br>
> I am in such a situation of VPN configuration:<br>
> gateway gwA with a fixed public IP,And there is a subnet<br>
</div>> <a href="http://192.168.9.0/24" target="_blank">192.168.9.0/24</a> <<a href="http://192.168.9.0/24" target="_blank">http://192.168.9.0/24</a>> behind it.<br>
<div class="im">> gateway gwB,which obtains its IP from ISP using pppoe,And<br>
> there is<br>
</div>> a subnet <a href="http://192.168.30.0/24" target="_blank">192.168.30.0/24</a> <<a href="http://192.168.30.0/24" target="_blank">http://192.168.30.0/24</a>> behind it.<br>
<div class="im">> There is a tunnel between the two subnets via gwA and gwB.And<br>
> there<br>
> is a tunnel for road warrior to connect subnet <a href="http://192.168.9.0/24" target="_blank">192.168.9.0/24</a><br>
</div>> <<a href="http://192.168.9.0/24" target="_blank">http://192.168.9.0/24</a>> via gwA.<br>
<div class="im">> What I want is to connect to both subnets<br>
> (<a href="http://192.168.30.0/24,192.168.9.0/24" target="_blank">192.168.30.0/24,192.168.9.0/24</a><br>
</div>> <<a href="http://192.168.30.0/24,192.168.9.0/24" target="_blank">http://192.168.30.0/24,192.168.9.0/24</a>>) as a road warrior via<br>
<div class="im">> gwA, Is this<br>
> possible?<br>
> By the way,I don't want to use l2tp.<br>
><br>
><br>
> You cannot, since subnetB or gwB would need to "know" where the<br>
> roadwarrior is to ensure its packets for subnetB would get send<br>
> via the tunnel to gwA. But since roadwarrior is on a dynamic IP,<br>
> you cannot know.<br>
><br>
> Unless you route all non-local traffic for subnetB via a tunnel<br>
> to gwA.<br>
><br>
> Paul<br>
><br>
><br>
</div>> ------------------------------------------------------------------------<br>
><br>
> _______________________________________________<br>
> <a href="mailto:Users@openswan.org">Users@openswan.org</a><br>
> <a href="http://lists.openswan.org/mailman/listinfo/users" target="_blank">http://lists.openswan.org/mailman/listinfo/users</a><br>
> Building and Integrating Virtual Private Networks with Openswan:<br>
> <a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
><br>
<br>
_______________________________________________<br>
<a href="mailto:Users@openswan.org">Users@openswan.org</a><br>
<a href="http://lists.openswan.org/mailman/listinfo/users" target="_blank">http://lists.openswan.org/mailman/listinfo/users</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
</blockquote></div><br>