<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">Rescued from the Spam bucket. Please remember to subscribe to the mailing list before posting to it.<br><div><br><div><div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(127, 127, 127, 1.0);"><b>From: </b></span><span style="font-family:'Helvetica';">David Brezynski <<a href="mailto:brezy@u.washington.edu">brezy@u.washington.edu</a>><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(127, 127, 127, 1.0);"><b>Subject: </b></span><span style="font-family:'Helvetica';"><b>Multiple servers with multiple tunnels each</b><br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(127, 127, 127, 1.0);"><b>Date: </b></span><span style="font-family:'Helvetica';">June 23, 2014 at 3:01:50 PM EDT<br></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;"><span style="font-family:'Helvetica'; color:rgba(127, 127, 127, 1.0);"><b>To: </b></span><span style="font-family:'Helvetica';"><a href="mailto:users@lists.openswan.org">users@lists.openswan.org</a><br></span></div><br><br>Hi List<br><br>I'm working on an IPSEC solution for a number of servers (lets say 4) where I need to encrypt traffic between each server (so each servers needs a tunnel to the other 3) for a distributed application. Traffic should not be encrypted between these servers and any others on the network. All IPs are static.<br><br>I'm assuming my only option is to set up individual tunnels in a one to many relationship for each of the servers (see configuration below). <br><br>Question - is this the correct approach? Is there more concise configuration I can use so I can reuse the configuration files unchanged on all the servers involved? Anything I'm missing?<br><br>In the initial setup I'm using pre-shared keys and my config files (connection definitions and secrets file) are:<br><br><br>============ /etc/ipsec.d/test.con<br>conn host1-to-host2<br> left=host1<br> right=host2<br> auto=start<br> authby=secret<br><br>conn host1-to-host3<br> left=host1<br> right=host3<br> auto=start<br> authby=secret<br><br>conn host1-to-host4<br> left=host1<br> right=host4<br> auto=start<br> authby=secret<br><br>======================<br><br><br>============ /etc/ipsec.d/ipsec.secrets <br>host1 host2 : PSK "key in quotations"<br>host1 host3 : PSK "key in quotations"<br>host1 host4 : PSK "key in quotations"<br>========================<br><br>Thanks<br>David<br><br><br></div></div></div><br></body></html>