<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META content="text/html; charset=iso-8859-1" http-equiv=Content-Type>
<META name=GENERATOR content="MSHTML 8.00.6001.19120">
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2 face="MS Sans Serif">Hi Experts:</FONT></DIV>
<DIV> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">I am trying to learn Openswan, starting
with a simple NAT'ed setup.<BR>One end is behind a cable modem Nat router.
The other end is not Nat'ed.<BR>All the examples I can find tell me to use
"left=%defaultroute" which works. If I replace %defaultroute with the real
public IP or the cable modem's IP (192.168.x.1) then I get error:<BR>"We cannot
identify ourselves with either end of this connection."</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">Is it possible to get rid of the
%defaultroute? Is %defaultroute somehow tied to the default route entry in the
routing table? </FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">I need to sort this out before I move on
to the more complicated setup:<BR>a Linux box with two WAN links and one LAN
link. One WAN link is NAT'ed. We have 20 tunnels right now and I need to move
half of those to the NAT'ed link.</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">Also appreciate pointers on how to
configure routing in this multihome situation.</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">My test environment is as
follow.</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">OS and swan
info<BR>================<BR>openswan-2.6.24-8.el6_0.1.x86_64<BR>Centos
6.0<BR>kernel 2.6.32-71.29.1.el6.x86_64</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">ipsec.conf<BR>=============<BR>version
2.0</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">config
setup<BR>
plutodebug="control"<BR>
protostack=netkey<BR>
nat_traversal=yes<BR>
interfaces=%defaultroute</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">conn
office<BR>
authby=secret<BR>
left=%defaultroute<BR>
leftid=192.168.168.5<BR>
leftsourceip=192.168.168.5<BR>
leftsubnet=192.168.168.0/24<BR>
right=216.x.x.x<BR>
rightsubnet=192.168.40.0/24<BR>
auto=route</FONT></DIV>
<DIV><FONT size=2 face="MS Sans Serif"></FONT> </DIV>
<DIV><FONT size=2 face="MS Sans Serif">Best
Regards,<BR>SC</FONT></DIV></BODY></HTML>