[Openswan Users] Re: help for multihome route

Bob Benstro bbenstro at gmail.com
Fri Jun 24 21:06:27 CEST 2005


On 6/24/05, Paul Wouters <paul at xelerance.com> wrote:
> On Fri, 24 Jun 2005, Bob Benstro wrote:
> 
> > Can no person help me for this?  I apologizing for bad english, please
> > forgive this.
> >
> > On 6/23/05, Bob Benstro <bbenstro at gmail.com> wrote:
> >> Hello,
> >>
> >> I use the patch here at http://www.ssi.bg/~ja/#routes, for mutliroute.
> >>  Works ok.
> >>
> >> I not able to get ipsec to start when I having no default route.  I
> >> have this words:
> >>
> >> ipsec_setup: Stopping Openswan IPsec...
> >> ipsec_setup: Starting Openswan IPsec U2.2.0/K2.6.11.12...
> >> ipsec_setup: no default route, %defaultroute cannot cope!!!
> >>
> >> System is 2.6.11.12.  Is there way to get ipsec to work with no
> >> default route?  If I fake default route does ipsec working with above
> >> patch?
> 
> You can use openswan without a defaultroute. It just means you cannot
> use left= or right=%defaultroute. you will need to specify the IP
> specifically. You might also need to add interfaces="ipsec0=eth0" just
> so it will not use the implicit default of "%defaultroute".

Thank for reply.

I using 2.6 so no ipsec device.  Problem I say below is causing
problem for interface line.  I have not know device for adsl, can be
ppp0 ppp1 ppp8, any ppp.  This because l2tpd assign anywhere ppp and
can take away ppp0 - ppp3 I using for ADSL modem.  All need to happen
is for one adsl go down, then sometime ipsec->l2tp happen, now ADSL is
ppp12.

Above make interface no working, I not know which interface= to using. 

> 
> Paul
> 
> >> I have previous post about setup below, but no talk back :/
> >>
> >> -----------------------------------------------------------------------------------------------
> >>
> >> I have two question about openswan.
> >>
> >> I have four dsl modem with dynamic pppoe.  This mean that I can not
> >> tell what ppp device I have for each modem.  Since I use pptp for some
> >> thing, and l2tp for other, over the time of few weeks, ppp0-ppp3
> >> interface for ADSL modem can move to ppp4, ppp6 or other ppp device.
> >> This is because pptp or l2tp may take ppp0-ppp3 device when ADSL modem
> >> is down.
> >>
> >> I run x509 for road warrier with winxp.  All work ok, as long as I
> >> make sure "left=" statement have real IP or hostname in it.
> >>
> >> I want to have "left=%any" or "left=0.0.0.0\0" but this not work.  Can
> >> someone help to make "left=[any.interface.ip]?  I have dynamicdns, but
> >> this not reliable, and not good way to make left= work for me.
> >>
> >> Also, can someone help to get openswan listen on *:500, instead of
> >> ip:500?  Why so much work with ipsec whack --listen every time new ppp
> >> DSL comes up?
> >>
> >> I have no default route, I use mutlihome routing.  Is any way to not
> >> have to make fake default route, then remove, so openswan run?
> >>
> >> Thank for good product, all complaint are small compared to having
> >> good vpn with xp client + linux box. ;)
> >>
> > _______________________________________________
> > Users mailing list
> > Users at openswan.org
> > http://lists.openswan.org/mailman/listinfo/users
> >
> 
> --
> 
>    "I am not even supposed to be here today!"  -- Clerics
>


More information about the Users mailing list