[Openswan Users] Re: help for multihome route

Bob Benstro bbenstro at gmail.com
Fri Jun 24 13:55:24 CEST 2005


Can no person help me for this?  I apologizing for bad english, please
forgive this.

On 6/23/05, Bob Benstro <bbenstro at gmail.com> wrote:
> Hello,
> 
> I use the patch here at http://www.ssi.bg/~ja/#routes, for mutliroute.
>  Works ok.
> 
> I not able to get ipsec to start when I having no default route.  I
> have this words:
> 
> ipsec_setup: Stopping Openswan IPsec...
> ipsec_setup: Starting Openswan IPsec U2.2.0/K2.6.11.12...
> ipsec_setup: no default route, %defaultroute cannot cope!!!
> 
> System is 2.6.11.12.  Is there way to get ipsec to work with no
> default route?  If I fake default route does ipsec working with above
> patch?
> 
> I have previous post about setup below, but no talk back :/
> 
> -----------------------------------------------------------------------------------------------
> 
> I have two question about openswan.
> 
> I have four dsl modem with dynamic pppoe.  This mean that I can not
> tell what ppp device I have for each modem.  Since I use pptp for some
> thing, and l2tp for other, over the time of few weeks, ppp0-ppp3
> interface for ADSL modem can move to ppp4, ppp6 or other ppp device.
> This is because pptp or l2tp may take ppp0-ppp3 device when ADSL modem
> is down.
> 
> I run x509 for road warrier with winxp.  All work ok, as long as I
> make sure "left=" statement have real IP or hostname in it.
> 
> I want to have "left=%any" or "left=0.0.0.0\0" but this not work.  Can
> someone help to make "left=[any.interface.ip]?  I have dynamicdns, but
> this not reliable, and not good way to make left= work for me.
> 
> Also, can someone help to get openswan listen on *:500, instead of
> ip:500?  Why so much work with ipsec whack --listen every time new ppp
> DSL comes up?
> 
> I have no default route, I use mutlihome routing.  Is any way to not
> have to make fake default route, then remove, so openswan run?
> 
> Thank for good product, all complaint are small compared to having
> good vpn with xp client + linux box. ;)
>


More information about the Users mailing list