[Openswan Users] Windows XP to OpenSWAN with ipsec.exe

[Paul Wouters]

On Wed, 26 Apr 2006, Pat Fricke wrote:

> I have not seen any documentation on virtual_private setting and
> rightsubnet=vhost configuration.
>
> Could you please point me to something that would explain how to set these?

Those should appear in the latest version of man pages, but have been missing.

rightsubnet=vhost:%no,%priv

virtual_private=%v4:10.0.0.0/8,%v4:192.268.0.0/16,%4:172.16.0.0/12,%v4:!192.168.1.0/24

Thios example would be if your own server subnet is "192.168.1.0/24". It is excluded
from virtual_private (to prevent clashes with that ip range behind a NAT device)

> I will see how far I can get with that tool, do I still need the
> virtual_private setting and rightsubnet=vhost configuration?

Yes

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155