[Openswan Users] WinXP Behind Nat to Openswan Server Behind NAT

[Paul Wouters]

On Mon, 17 Jul 2006, Jacco de Leeuw wrote:

> > conn L2TP-PSK-EXTERNAL
> >         authby=secret
> >         rightsubnet=vhost:%no,%priv
>
> rightsubnet= is not required for PSKs. I don't know why it is needed
> for certificates and not for PSKs...

rightsubnet= is needed for all NATed connections, whether it is using PSK
or X.509.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155