[Openswan Users] setup a l2tp/ipsec vpn

[Brian Candler]

On Tue, May 30, 2006 at 03:12:20PM +0000, hicham wrote:
> >> now the subnet for the right gateway is a network 10.3.5.0 / 8
> >> subnet for left gateway is a network 10.3.4.0/8
> >>
> >> is that a correct setup ? and feasable ?

Those are not valid networks, since the network part must be all zeros.

10.3.5.0/24 and 10.3.4.0/24 would be valid networks, as would 10.0.0.0/8

In any case, if you're using l2tp (as subject says) then it's not an issue.
IPSEC runs in transport mode, protecting traffic from x.x.x.x to y.y.y.y,
where x.x.x.x and y.y.y.y are the IP addresses of the two L2TP daemons.
Any subnets routed over the l2tp/ppp session is then independent of IPSEC.