[Openswan Users] Road-Warriors connecting to OpenSwan

David Coulson david at davidcoulson.net
Tue Jan 4 13:49:07 CET 2005


> conn road-warrior
>        left=%defaultroute
>        leftsubnet=10.x.y.z/25
>        right=%any
>        rightsubnet=
>        authby=secret
>        auto=add
>                                      
> I use ipsec.secrets PSK 

I'm using the following configuation using the Astaro Secure Client 
(basically the NCP client) - it works great.


conn astaro-client
         authby=secret
         left=%any
         leftsubnet=vhost:%no,%priv
         leftxauthclient=yes
         right=207.166.198.20
         rightnexthop=207.166.198.1
         rightid=@david.umlcoop.net
         rightxauthserver=yes
         auto=add

Obviously, if you just want plain PSK without XAUTH, you'll need to take 
those lines out.

David


More information about the Users mailing list