Hi Willie,<br> Thanks for your help. Its working fine. I have one more query.<br><br>Is there any option in openswan for IPSec pass through case? <br>Is it possible to add a policy in openswan with action as "none" instead of ipsec?<br>
<br>My aim is that " I dont want to encrypt traffic coming from 20.1.1.1 and I want to add a policy for this" <br><br><br><div class="gmail_quote">On Fri, Oct 7, 2011 at 12:53 AM, Willie Gillespie <span dir="ltr"><<a href="mailto:wgillespie%2Bopenswan@es2eng.com">wgillespie+openswan@es2eng.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;"><div class="im">On 10/6/2011 5:26 AM, SaRaVanAn wrote:<br>
><br>
> Hi,<br>
> Please find my topology below. I want to encrypt only the traffic<br>
> coming with source IP address as 10.1.1.1 and I don't want to encrypt<br>
> the traffic coming from 20.1.1.1.<br>
><br>
</div>> *Is there any option/configuration in openswan to select traffic based<br>
> on source IP address to go through tunnel?*<br>
<br>
Probably look at leftsubnet=<a href="http://10.1.1.1/32" target="_blank">10.1.1.1/32</a> or leftsubnet=<a href="http://10.1.1.1/nn" target="_blank">10.1.1.1/nn</a><br>
depending on your needs.<br>
_______________________________________________<br>
<a href="mailto:Users@openswan.org">Users@openswan.org</a><br>
<a href="http://lists.openswan.org/mailman/listinfo/users" target="_blank">http://lists.openswan.org/mailman/listinfo/users</a><br>
Micropayments: <a href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy" target="_blank">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a><br>
Building and Integrating Virtual Private Networks with Openswan:<br>
<a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155" target="_blank">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a><br>
</blockquote></div><br>