[Openswan Users] Problem with roadwarrior

[Paul Wouters]

On Wed, 23 Aug 2006, Raphael Clerc - Clerc-info.com wrote:

> > > I need a rodwarrior connection with a server Linux Debian with 2 ethernet
> > > :
> >
> > > I use the software thegrennbow ipsec client with windows xp.
> > >
> > > No problem with ping 192.168.1.1, but impossible to ping a another
> > > client in my private network.
> >
> > > Since the Linux server, i can ping and work with  192.168.10.9 (for
> > > example with smbclient //192.168.10.9/test), but i don't work with the
> > > xp client in private network (192.168.0.5).
> >
> > Did you configure an ipsec conection with leftsubnet=192.168.0.0/24 ?
> Yes.

> >         nat_traversal=yes
> >         plutodebug=control
> >         virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16

You need to add the exclusion for your subnet:

virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168.0.0/16,%v4:!192.168.0.0/24

> > Does the greenbow client start that connection?
>
> Yes. The tunnel is open. From client xp, it's ping, but only 192.168.1.1...
> not 192.168.0.5 or another computer in my private network.

So do you have a tunnel for 192.168.1.0/24 as well? Or are you reaching that
without ipsec?

I am not sure I understand your network. Doing l2tp with client natively in the
subnet used for IP pool of l2tp does not work AFAIK.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155