[Openswan Users] Virtual Private !

Paul Wouters paul at xelerance.com
Thu Jul 6 16:18:40 CEST 2006

On Thu, 6 Jul 2006, Brett Curtis wrote:

> virtual_private=%v4:,%v4:,%v4:,%v4:!
> My internal subnet is This is a pretty common IP range causing
> "I cant connect to the VPN" from my users.
> Now my question is this, do I need to change my internal subnet or can I just
> change the range of IPs given out by my l2tp daemon then make that change in
> the virtual_private line?
> Currently my l2tp daemon is giving out

You're best of migrating your l2tp to a different IP range, though people on
that range would still not be able to connect to your network,
unless you added some layer of nat.
The best thing is to get real ip space for your company. The next best thing
is to renumber the company network to another less commonly used range.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list