[Openswan Users]

[Andy Gay]

On Tue, 2006-08-08 at 23:58 +0200, Paul Wouters wrote:
> On Tue, 8 Aug 2006, Greg wrote:
> 
> > conn roadwarrior-l2tp
> >         left=%defaultroute
> >         leftcert=/etc/ipsec.d/certs/cert.pem
> >         leftprotoport=17/1701
> >         right=%any
> 
> You cannot use both %defaultroute and %any, because then openswan
> cannot determine if it is left or right.

You sure? I use that on a few systems, works OK.

Quote from ipsec.conf(5):
"If  it  is %defaultroute, and the config setup section's, interfaces
specification contains %defaultroute, left will be filled in
automatically with the local address of the default-route interface (as
determined at IPsec startup time)"