[Openswan dev] [PATCH] Updates to the ipsec.conf man page for leftsendcert

[Ken Bantoft]

On Fri, 14 May 2004, Nate Carlson wrote:

> I've updated the man page to include the leftsendcert directives. If I've
> got some details wrong, sorry - I just gleaned what I could from archive
> posts.  :)
> 
> I've also documented leftcert, as that wasn't in the man page before.
> 
> If someone can explain what leftsourceip is supposed to do exactly, I can
> also add docs for that.

leftsourceip=1.2.3.4   (note, no /32)  will assign 1.2.3.4/32 to the lo 
interface, and put the correct routes in to do virtual IP style 
connections.

ie: I have

        leftsubnet=10.0.30.125/32
        leftsourceip=10.0.30.125

And that lets me assign my laptop an IP from the remote local LAN.  Ensure 
your Openswan 'server' has proxy_arp enabled.  


> Also, my apologies if this is formatted incorrectly - I've never written
> man before, so just based it on the other entries. If there is something 
> wrong with the way I'm doing it, just let me know.

Looked okay to me.  Easy way to test - 'make install && man ipsec.conf' :)


-- 
Ken Bantoft			VP Business Development
ken at xelerance.com		Xelerance Corporation
sip://toronto.xelerance.com	http://www.xelerance.com

The future is here. It's just not evenly distributed yet. 
        -- William Gibson