<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; ">Rescued from the Spam bucket. Please make sure to subscribe to the mailing list before posting to it.<div><br><div><br><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica'; font-size:medium;">林聖艦 <<a href="mailto:mlsaint1214@gmail.com">mlsaint1214@gmail.com</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><b>IPsec on mutli-gateway machine</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica'; font-size:medium;">19 June, 2013 10:47:36 PM EDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; font-size:medium; color:rgba(127, 127, 127, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica'; font-size:medium;"><a href="mailto:users@lists.openswan.org">users@lists.openswan.org</a><br></span></div><br><br>I have a mutli-gateway machine.<div><br></div><div>eth0 192.168.1.10 <--> router A (<a href="http://192.168.1.1/24">192.168.1.1/24</a>) <--> PPPoE(public ip a.a.a.a)</div><div>eth1 172.16.1.10 <--> router B (<a href="http://172.16.1.1/24">172.16.1.1/24</a>) <--> PPPoE(public ip b.b.b.b)</div>
<div>eth2 <--> PPPoE(public ip c.c.c.c/ppp0)</div><div><br></div><div>Currently, if I specified left=192.168.1.10, 172.16.1.10 or c.c.c.c/%ppp0</div><div>every client from related public ip can connect to server well.</div>
<div><br></div><div>Here is my question:</div><div>How can I modify my ipsec.conf to handle all client from different interface?</div><div><br></div><div>I can see all interface is listening by pluto from netstat.</div><div>
But I cannot configure out.</div><div><br></div><div>My ipsec.conf:</div><div><br></div><div><div>version 2.0</div><div>config setup</div><div> nat_traversal=yes</div><div> virtual_private=%v4:<a href="http://10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12">10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12</a></div>
<div> oe=off</div><div> protostack=netkey</div><div><br></div><div>conn L2TP-PSK-NAT</div><div> rightsubnet=vhost:%priv</div><div> also=L2TP-PSK-noNAT</div><div><br></div><div>conn L2TP-PSK-noNAT</div><div> authby=secret</div>
<div> pfs=no</div><div> auto=add</div><div> keyingtries=3</div><div> rekey=no</div><div> ikelifetime=8h</div><div> keylife=1h</div><div> type=transport</div><div> left=172.16.1.10</div><div> leftprotoport=17/1701</div>
<div> right=%any</div><div> rightprotoport=17/%any</div><div> forceencaps=yes</div><div> dpddelay=10</div><div> dpdtimeout=90</div><div> dpdaction=clear</div></div><div><br></div><div>Thanks for your help,</div>
<div>Kenneth</div>
<br><br></div></div><br></div></body></html>