[Openswan Users] openSWAN to Cisco IOS

Peter McGill petermcgill at goco.net
Wed Nov 15 12:29:50 EST 2006

Christian Brechbühler Wrote:
> On a hunch I changed leftsubnet to -- and BINGO! IPsec SA established.  So Openswan seems happy, although
> no packets go through.  I suspect now it's a routing/firewalling issue.

With leftsubnet, only that ip address on your end will be able to use the vpn tunnel.
If you want your whole subnet to be able to use it, you must change leftsubnet to and have the cisco admin change
your subnet on his end as well.


More information about the Users mailing list