[Openswan Users] l2tpd problem?

[Jacco de Leeuw]

Tomasz Grzelak wrote:

> what is the 'peer' IP address - is it the IP assigned 
> from /etc/ppp/chap-secrets or is it the real IP address of the client?
> 
> so according to my needs, it should be:
>  peer 172.22.22.0/27 (my clients get assigned those IPs)
> or
>  peer 0.0.0.0/0 (any client can be the peer end, meaning a road warrior)

These are the allowed IP addresses for the L2TP clients. For Road Warriors
you will want to allow all addresses:

peer 0.0.0.0
mask 0

> I don't want to use any inner-pppd, so as I can see I have no other option, 
> but rp-l2tp to support road warriors with 'always-the-same-IPs' assigned, 
> right?

I think so. OpenL2TP may work but the authors have not tested it with IPsec
and I have not received reports that anyone has tried it.

Jacco
-- 
Jacco de Leeuw                         mailto:jacco2 at dds.nl
Zaandam, The Netherlands           http://www.jacco2.dds.nl