[Openswan Users] How to hide LAN

[Paul Wouters]

On Tue, 7 Nov 2006, Chris Purves wrote:

> I have set up openswan for ipsec over l2tp using certificates according
> to the following howto's:
>
> http://www.natecarlson.com/linux/ipsec-l2tp.php
> http://www.jacco2.dds.nl/networking/win2000xp-openswan.html
>
> I have the connection working, but I would like to have it set up so
> that the roadwarrior machine (winxp) cannot see the LAN behind the
> server.  Essentially I would like the connection to allow the
> roadwarrior and the server to see each other, but nothing else.
>
> How would I go about setting this up?

Use a dedicated subnet range for your l2tp clients that are only
routable to your server?

Paul