[Openswan Users] How do I set up openswan of an entire subnet?
Michael Tautschnig
michael.tautschnig at zt-consulting.com
Wed Feb 23 19:43:25 CET 2005
>
> Using right=0.0.0.0 for the remote hosts' IP addresses should do the
> trick.
>
No, that yields
ipsec__plutorun: 029 "test": cannot initiate connection without knowing peer IP address (kind=CK_TEMPLATE)
My config for "test":
conn test
left=%defaultroute
right=0.0.0.0
auto=start
authby=rsasig
leftrsasigkey=%cert
rightrsasigkey=%cert
leftcert=/etc/racoon/racoon.pem
rightcert=/etc/racoon/racoon.pem
pfs=no
So - what?
Thanks,
Michael
More information about the Users
mailing list