[Openswan Users] VPN over WLAN to IPCop

[Paul Wouters]

On Wed, 1 Sep 2004, Piers Kittel wrote:

> Thing is that I tried putting "presharedkey" in the file, but ispec didn't 
> recognise the parameter and so I took it out, but am not sure where I should 
> be putting the key.

/etc/ipsec.secrets

(see man ipsec.secrets)

> Anyway, I restart ipsec, and it seems all OK, but when I try "ipsec auto --up 
> home" it says "022 "home": we cannot identify ourselves with either end of 
> this connection.".  Where do I go from here?  Logs on both computers aren't 
> helpful.  What am I doing wrong?

Use right=%defaultroute instead of right=%any
Think of %any for incoming connections, and %defaultroute for outgoing
connections. (defaulroute means 'pick the ip address closest to the default
gateway)

> By the way, in the wiki documentation 
> (http://wiki.openswan.org/index.php/Configuring), there's an line:
>
> "ipsec auto --start net-to-net"
>
> tried that, but "--start" isn't recognised.

Right. That should be --up

Paul