[Openswan Users] ipsec / l2tpd + iptables ?

Reza ISSANY issanyr at laposte.net
Mon Nov 27 14:30:28 EST 2006


No, this is my config :

version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        interfaces="ipsec0=eth0"
        nat_traversal=yes
        virtual_private=%v4:!172.16.7.0/16,%v4:192.168.7.0/24
        klipsdebug=none
        plutodebug=all

conn %default
        left=88.191.35.181

# Add connections here
conn xp
        keyingtries=1
        compress=no
        disablearrivalcheck=no
        authby=rsasig
        leftrsasigkey=%cert
        rightrsasigkey=%cert
        leftcert=integration.pem
        leftprotoport=17/1701
        leftnexthop=88.191.35.1
        right=%any
        rightca=%same
        rightprotoport=17/1701
        rightsubnet=vhost:%no,%priv
        pfs=no
        auto=add

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf

and this is my route table :
root at integration:~# netstat -nra
Table de routage IP du noyau
Destination     Passerelle      Genmask         Indic   MSS Fenêtre 
irtt Iface
88.191.35.0     0.0.0.0         255.255.255.0   U         0 0          0 
eth0
172.16.0.0      0.0.0.0         255.255.0.0     U         0 0          0 
eth0
0.0.0.0         88.191.35.1     0.0.0.0         UG        0 0          0 
eth0

any idea please ?

thanks.

reza.

Paul Wouters a écrit :
> On Mon, 27 Nov 2006, Reza ISSANY wrote:
>
>   
>> I'm a french people, so please, forgive me for my bad english.
>>
>> I'v installed the openswan 2.4.7 to build a vpn gateway for
>> windows xp pro sp2 clients.
>>
>> The connection is established, but, when i done, I have no acces
>> to internet. I have no ipsecx interface (kernel 2.6.18), and I'm searching how
>> resolve
>> the problem.
>>     
>
> You might forgot to include /etc/ipsec.d/examples/no_oe.conf ?
>
> Paul
>   

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20061127/618ea6b5/attachment.html 


More information about the Users mailing list