[Openswan Users] OpenSwan and Planet VPN Router VRT-311ST

[Daniela Gradim]

I have bought Planet VRT  vpn router and when I configure without CA it works
with open swan.

conn gw3-gw1
       left=%defaultroute
       leftsubnet=10.141.122.0/25
       leftnexthop=
       right=217.75.2.15
       rightsubnet=192.168.1.0/24
       rightnexthop=
       auto=add
       authby=secret

but when I try to use CA I can't have connection I tried this config.

conn rw
       authby=rsasig
       left=%defaultroute
       leftsubnet=10.141.122.0/25
       leftcert=gw.cer
       right=%any
       rightrsasigkey=%cert
       rightsubnet=
       rightsubnetwithin=192.168.1.0/24
       auto=add

ipsec.secret

RSA gw.p1.pem

But I'm not sure how to configure with CA.
I have pcsk1 to authentication I need have the same format install on my
vpnrouter ? I mean should I install the same gw.p1.pem on my vpnbox.
I need have the left certificate install at my vpnrouter ???
I need create one new certificate to my vpnrouter ???

Can you explain me better how it works with CAs.

Thanks

Daniela Gradim


----------------------------------------------------------------
This message was sent using IMP, the Internet Messaging Program.