[Openswan Users] NET (roadwarrior) - To - NET connectin is possible?

[Paul Wouters]

On Thu, 9 Jun 2005, Randy B wrote:

> Here's my question: why do we do net-to-net connections?  Someone slap
> me and tell me what this offers over setting up a host-to-host between
> gateways and just setting up proper routes?

Security. You cannot 'route add' into ipsec tunnels. There are ipsec
policies involved. Any packet with some strange src/dst will not be
allowed to go through the tunnel, unless it follows tunnel policies.

Paul