[Openswan Users] VPN policie and Protocol selector

david david2005.p at gmail.com
Wed Sep 14 14:06:22 CEST 2005


Hi all,
 
I ve configured the ends of my VPN like this :

HostA :
conn testvpn
       left=195.212.109.203
       leftcert=user02cert.crt
       right=195.212.109.202
       rightid="C=fr, ST=idf, ....."
       type=passthrough
       leftprotoport=1
       rightprotoport=1
       auto=route

HostB:
conn testvpn
       left=195.212.109.202
       leftcert=user01cert.crt
       right=%any
       rightcert=%cert
       type=passthrough
       leftprotoport=1/%any
       rightprotoport=1/%any
       auto=route

Those 2 hosts are directly linked for tests and there is no subnet
behind them.  When the HostA establishes the VPN with HostB, the VPN
goes up but only icmp traffic can use it. Other traffics are simply
discarded...and I don't want that.

So what's wrong or missed ?

rgds
david


More information about the Users mailing list