[Openswan Users] routing on existing tunnel.

[Paul Wouters]

On Mon, 3 Dec 2007, Gurvinder Singh wrote:

> I am using openswan 2.4.4(netkey). my current step is working very fine
> which is
>
> (site a) 10.10.10.0/24....public ip..public ip.....10.10.11.0/24 (site b).
>
> now i have one more network 10.10.12.0/24 at site a, how can i use the
> existing tunnel to get
> the communication between 10.10.11.0/24 and 10.10.12.0/24. I tried by adding
> routes at site b but its
> not working.

You need to add tunnels, not routes. IPsec is not a virtual ethernet device.
It has security policies that dictate which packets may or may not go through
the tunnel.

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155