<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">Hmmm.... one way to do it is to change
your subnetting so that initially the traffic isn't captured by
netkey until the traffic has been SNAT'd to something that matches
the SPD.<br>
<br>
So the leftsubnet is what you want to SNAT to.<br>
<br>
If that makes sense.<br>
<br>
-Bryan<br>
<br>
On 11/15/2013 10:54 AM, George Wanley wrote:<br>
</div>
<blockquote
cite="mid:C96AD5C1EF0E564F8F5BF92D0C9AE7F79AB87D4A36@PHOENIX.aviary.local"
type="cite"><!-- Template generated by Exclaimer Mail Disclaimers on 04:55:00 Friday, 15 November 2013 -->
<style type="text/css">P.d1ee5760-e958-406c-aa4c-8bea9b4fd850 {
MARGIN: 0cm 0cm 0pt
}
LI.d1ee5760-e958-406c-aa4c-8bea9b4fd850 {
MARGIN: 0cm 0cm 0pt
}
DIV.d1ee5760-e958-406c-aa4c-8bea9b4fd850 {
MARGIN: 0cm 0cm 0pt
}
TABLE.d1ee5760-e958-406c-aa4c-8bea9b4fd850Table {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style><!-- Template generated by Exclaimer Mail Disclaimers on 04:55:00 Friday, 15 November 2013 -->
<style type="text/css">P.ba6352e8-bb6c-437b-93ff-445440cbf280 {
MARGIN: 0cm 0cm 0pt
}
LI.ba6352e8-bb6c-437b-93ff-445440cbf280 {
MARGIN: 0cm 0cm 0pt
}
DIV.ba6352e8-bb6c-437b-93ff-445440cbf280 {
MARGIN: 0cm 0cm 0pt
}
TABLE.ba6352e8-bb6c-437b-93ff-445440cbf280Table {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style><!-- Template generated by Exclaimer Mail Disclaimers on 04:55:00 Friday, 15 November 2013 -->
<style type="text/css">P.13118600-8c1e-4162-a99a-04a14e694091 {
MARGIN: 0cm 0cm 0pt
}
LI.13118600-8c1e-4162-a99a-04a14e694091 {
MARGIN: 0cm 0cm 0pt
}
DIV.13118600-8c1e-4162-a99a-04a14e694091 {
MARGIN: 0cm 0cm 0pt
}
TABLE.13118600-8c1e-4162-a99a-04a14e694091Table {
MARGIN: 0cm 0cm 0pt
}
DIV.Section1 {
page: Section1
}
</style>
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
<meta name="Generator" content="Microsoft Word 14 (filtered
medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 72.0pt 72.0pt 72.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
<p class="d1ee5760-e958-406c-aa4c-8bea9b4fd850">
</p>
<p class="ba6352e8-bb6c-437b-93ff-445440cbf280">
</p>
<div class="WordSection1">
<p class="MsoNormal">Hello,<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">We have a requirement to NAT all traffic
down an IPSec site to site VPN tunnel to a Cisco
firewall…..does Openswan provide this function?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks<o:p></o:p></p>
</div>
<p class="13118600-8c1e-4162-a99a-04a14e694091"> </p>
<p class="13118600-8c1e-4162-a99a-04a14e694091">
<table style="BORDER-COLLAPSE: collapse"
class="13118600-8c1e-4162-a99a-04a14e694091Table" border="0"
cellpadding="0" cellspacing="0" cols="2">
<tbody>
<tr>
<td width="115">
<p class="13118600-8c1e-4162-a99a-04a14e694091"><img
moz-do-not-send="true" id="IMG1" alt="Indigo Logo"
src="http://www.indigo.co.uk/images/Signature_Logo.gif"
border="0" height="100" width="115"></p>
</td>
<td width="450">
<p class="13118600-8c1e-4162-a99a-04a14e694091"><span
style="font-family:Calibri; font-weight: bold; ">George
Wanley</span> | <span style="font-family:Calibri; ">Technical
Manager</span> | <span style="font-family:Calibri;
color: #380982; font-weight: bold; "><span
style="font-family:Calibri; color: #380982;
font-weight: bold; "><a moz-do-not-send="true"
href="http://www.indigo.co.uk/" title="Indigo
Software Ltd" target=""><span
style="font-family:Calibri; color: #380982;
font-weight: bold; ">Indigo Software Ltd</span></a></span></span></p>
<table style="BORDER-COLLAPSE: collapse"
class="13118600-8c1e-4162-a99a-04a14e694091Table"
border="0" cellpadding="0" cellspacing="0" cols="2">
<tbody>
<tr>
<td width="30">
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
color="#f07b05" face="Calibri"><strong>DDI</strong></font></p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
color="#f07b05" face="Calibri"><strong>M</strong></font></p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
color="#f07b05" face="Calibri"><strong>T</strong></font></p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
color="#f07b05" face="Calibri"><strong>E</strong></font></p>
</td>
<td>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
face="Calibri">+44 191 375 6715 </font></p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
face="Calibri">+44 7771 961 334 </font></p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
face="Calibri">+44 191 375 6700</font></p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"><font
face="Calibri"><span
style="font-family:Calibri; color:
#380982; "><span
style="font-family:Calibri; color:
#380982; "><a moz-do-not-send="true"
href="mailto:george.wanley@indigo.co.uk"
title="Click to send email to George
Wanley" target=""><span
style="font-family:Calibri; color:
#380982; ">george.wanley@indigo.co.uk</span></a></span></span></font></p>
</td>
</tr>
</tbody>
</table>
</td>
</tr>
</tbody>
</table>
</p>
<p class="13118600-8c1e-4162-a99a-04a14e694091"> </p>
<p class="d1ee5760-e958-406c-aa4c-8bea9b4fd850"><font
face="Calibri" size="1">This E-mail message,
including any attachments, is intended only for the person or
entity to which it
is addressed, and may contain confidential information. If you
are not the
intended recipient, any review, retransmission, disclosure,
copying,
modification or other use of this E-mail message or
attachments is strictly
forbidden. If you have received this E-mail message in error,
please contact the
author and delete the message and any attachments from your
computer. You are
also advised that the views and opinions expressed in this
E-mail message and
any attachments are the author's own, and may not reflect the
views and opinions
of Indigo Software Ltd. Internet communications are not
guaranteed to be secure
or virus-free. Indigo Software Ltd does not accept
responsibility for any loss
arising from unauthorised access to, or interference with, any
Internet
communications by any third party, or from the transmission of
any viruses.
Visit us at </font><a moz-do-not-send="true" title="Indigo
Website" href="http://www.indigo.co.uk/"><font face="Calibri"
size="1">http://www.indigo.co.uk/</font></a></p>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
<a class="moz-txt-link-abbreviated" href="mailto:Users@lists.openswan.org">Users@lists.openswan.org</a>
<a class="moz-txt-link-freetext" href="https://lists.openswan.org/mailman/listinfo/users">https://lists.openswan.org/mailman/listinfo/users</a>
Micropayments: <a class="moz-txt-link-freetext" href="https://flattr.com/thing/38387/IPsec-for-Linux-made-easy">https://flattr.com/thing/38387/IPsec-for-Linux-made-easy</a>
Building and Integrating Virtual Private Networks with Openswan:
<a class="moz-txt-link-freetext" href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155</a>
</pre>
</blockquote>
<br>
</body>
</html>