[Openswan Users] Configuring NAT-T

Paul Wouters paul at xelerance.com
Wed Apr 13 20:35:40 CEST 2005

On Wed, 13 Apr 2005, Vernon A. Fort wrote:

> I'm trying to get two FC3 firewall/openswan boxes connected using NAT-T.   My 
> layout:
> [RIGHT]   -> Right Firewall <-> Left Firewall -> 
> -> [NAT-T] [LEFT]

I do not understand this diagram at all. Try writing it with boxes for
each machine and/or add interface names to IP's involved.

> The VPN from 192.168.10/24 successfully connected to the 192.168.20/24.  I

"The VPN" connected? Do you mean the two Openswan boxes connected? Do you
mean you have a working VPN from the subnet 192.168.10/24 to subnet

> need hosts on the right, say to connect via the VPN to hosts on 
> the left, say 1921.68.1.10. is outside any of your VPN subnets listed about, so you will
need a seperate new connection definition for this.

> conn supportvpn
>       # RIGHT - support provider
>       authby=secret
>       right=
>       rightsubnet=
>       rightsourceip=
>       rightnexthop=%defaultroute
>       # LEFY - my side
>       left=
>       leftsubnet=
>       leftsourceip=
>       leftnexthop=%defaultroute
>       auto=add

This will setup a tunnel from to It does
not do anything for Add another conn with

conn supportvpn2


More information about the Users mailing list