[Openswan Users] WinXP Behind Nat to Openswan Server Behind NAT

Paul Wouters paul at xelerance.com
Tue Jul 18 06:59:05 CEST 2006

On Mon, 17 Jul 2006, Jacco de Leeuw wrote:

> >         authby=secret
> >         rightsubnet=vhost:%no,%priv
> rightsubnet= is not required for PSKs. I don't know why it is needed
> for certificates and not for PSKs...

rightsubnet= is needed for all NATed connections, whether it is using PSK
or X.509.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list