[Openswan Users] Linux<->Linux RoadWarrior: Default Gateway Problem

[Roland Plüss]

This did the trick... so far. Worked until I tried accessing larger web
pages. I got MTU need to frag ICMP packages and the connection failed. I
looked around the net and there had been pages telling to use
uverwritemtu in ipsec.conf. This though doesn't work with netkey it
seems. I did now use ifconfig to limit the MTU which seems to work.

Is there a better option for this? It would be annoying to check every
laptop hooked up to have not a broken MTU setup.

Paul Wouters wrote:
> On Sun, 26 Aug 2007, Roland Plüss wrote:
>
>   
>> conn openswan-roadwarrior
>>    left=192.168.3.2
>>    leftsubnet=192.168.1.0/24
>>     
>
>   
>> Hence in my routing table on the laptop I have correctly set to route
>> through the tunnel if the destination is 192.168.1.0/24. But if an
>> internet address is the destination this route doesn't hold anymore and
>> the default route is used which goes directly to the access point which
>> dissallows this.
>>
>> How can configuration OpenSwan to become the default route on my laptop
>> so ANY traffic is send through the tunnel and not only the one to my
>> internal network?
>>     
>
> use a left/rightsubnet of 0.0.0.0/0
>
> Paul
>   
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20070827/25216ac8/attachment.html 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 252 bytes
Desc: OpenPGP digital signature
Url : http://lists.openswan.org/pipermail/users/attachments/20070827/25216ac8/attachment.bin