[Openswan Users] openswan problems

[Paul Wouters]

> 1) Everytime I start IPSec my network connection becomes "Resource 
> Unavailable"

Include /etc/ipsec.d/examples/no_oe.conf. Looking further in your mail you
say you do. did you restart?

> 2) Is my ipsec.conf even close for a roadwarrior setup using dynamic ips with 
> WinXP SP2 clients.
>
> config setup
>       interfaces=%defaultroute
>       nat_traversal=yes
>       virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16
>
> conn %default
>       keyingtries=1
>       compress=yes
>       disablearrivalcheck=no
>       authby=rsasig
>       leftrsasigkey=%cert
>       rightrsasigkey=%cert
>
> conn roadwarrior-net
>       leftsubnet=192.168.10.0/255.255.255.0
>       also=roadwarrior

you need to exclude 192.168.10.0/24 from %v4:192.168.0.0/16 by adding a
%v4:!192.168.10.0/24.

Paul
-- 

"At best it is a theory, at worst a fantasy" -- Michael Crichton