[Openswan Users] How do I set up openswan of an entire subnet?

Michael Tautschnig michael.tautschnig at zt-consulting.com
Wed Feb 23 19:43:25 CET 2005


>
> Using right=0.0.0.0 for the remote hosts' IP addresses should do the
> trick.
>
No, that yields

ipsec__plutorun: 029 "test": cannot initiate connection without knowing peer IP address (kind=CK_TEMPLATE)

My config for "test":

conn test
   left=%defaultroute
   right=0.0.0.0
   auto=start
   authby=rsasig
   leftrsasigkey=%cert
   rightrsasigkey=%cert
   leftcert=/etc/racoon/racoon.pem
   rightcert=/etc/racoon/racoon.pem
   pfs=no

So - what?

Thanks,
Michael


More information about the Users mailing list