[Openswan Users] VPN over ADSL

[Necati Demir]

Hi all,
I have two hosts, one of them uses dial-up and the other uses ADSL.

192.52.5.2 ===192.52.5.1(ADSL modem - a.b.c.d is external ip ) -------- 
e.f.g.h is dial-up === 192.168.0.0/24

I have two problems.
a.b.c.d can connect to e.f.g.h bu using "ipsec auto --up connection" but 
e.f.g.h can not connect to a.b.c.d. Virtual Setting are ok in ADSL 
modem. And although i can connect to a.b.c.d with the host which have 
dial-up, i can not ping 192.52.5.2.

And these are the config files, can anyone help me?

CONFIG FILE OF 192.52.5.2

version 2.0

config setup
        interfaces=%defaultroute
        nat_traversal=yes
        uniqueids=no
        
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/24,%v4:192.52.4.0/24,%v4:192.52.5.0/24
        klipsdebug=all
        plutodebug=all

conn %default
        keyingtries=1
        compress=no
        disablearrivalcheck=yes
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert
        keyexchange=ike

conn connection
        left=%defaultroute
        leftsubnet=192.52.5.0/24
        leftcert=host1.pem
        rightcert=host2.pem
        right=e.f.g.h
        rightsubnet=192.168.0.0/24
        auto=add
        pfs=yes

conn block
        auto=ignore

conn private
        auto=ignore


conn private-or-clear
        auto=ignore

conn clear-or-private
        auto=ignore

conn clear
        auto=ignore

conn packetdefault
        auto=ignore

include /etc/ipsec.d/examples/no_oe.conf



CONFIG FILE OF e.f.g.h
version 2.0

config setup
        interfaces=%defaultroute
        nat_traversal=yes
        uniqueids=no
        
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/24,%v4:192.52.4.0/24,%v4:192.52.5.0/24
        klipsdebug=all
        plutodebug=all

conn %default
        keyingtries=1
        compress=no
        disablearrivalcheck=yes
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert
        keyexchange=ike


conn roadwarrior
        left=%defaultroute
        leftcert=host2.pem
        leftsubnet=192.168.0.0/24
        right=a.b.c.d
        rightsubnet=192.52.5.0/24
        rightcert=host1.pem
        auto=add
        pfs=yes

conn block
        auto=ignore

conn private
        auto=ignore

conn private-or-clear
        auto=ignore

conn clear-or-private
        auto=ignore

conn clear
        auto=ignore

conn packetdefault
        auto=ignore

include /etc/ipsec.d/examples/no_oe.conf