[Openswan Users] Changing MTU on a route seems to mess up leftsourceid in a conn definition
andy at andynet.net
Sat Sep 16 01:27:24 EDT 2006
On Sat, 2006-09-16 at 00:00 -0500, Greg Scott wrote:
> Pinging a host across the tunnel works, right from the router. (The
> conn definition has a leftsourceid line.)
Actually it has a leftsourceip line, which is what you mean, I think.
If you specify leftsourceip it makes the pluto _updown script add "src
<address>" to each "ip route add" it does. So if you change the route,
you'll need to add that as well.
> [root at roseville-fw ipsec.d]# /sbin/ip route change 10.0.0.0/8 dev eth0
> mtu 1470
Should be "ip r change 10.0.0.0/8 dev eth0 mtu 1470 src 10.15.1.1"
More information about the Users