[Openswan Users] Road warrior issue

[Paul Wouters]

On Thu, 1 Sep 2005, Thiago Campos wrote:

> On my Fedora 3 the Kernel is 2.6.9-1.667 and openswan-2.3.1-1
> You mean i have to install openswan-klips, right?
>
> At the openswan ftp i found openswan-klips-2.3.1-2.6.10_1.770_FC3_1.i386.rpm 
> can i use it or i have to upgrade my kernel before?

rebuild the rpms from the FC3 openswan-2.4.0rc4.src.rpm

> By the way what are the  lines to enable nat_traversal and virtual_privatein?

nat_traversal=yes is for enabling NAT-Traversal
virtual_private is to list the valid "behind the NAT" addresses that you
allow for NAT-Traversal. These normally contain all private space IP, excluding
any private space IP used on the server for its own subnets. eg if your
server has the network 10.0.10.0/24, you would use:

virtual_private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:!10.0.10.0/24

Paul