[Openswan Users] routing problem
paul at xelerance.com
Fri Dec 28 11:34:21 EST 2007
On Thu, 27 Dec 2007, Fatih wrote:
> this problem occured after upgrading from openswan version 2.4.6 to 2.4.8
> computer has 2 real internet ip address first is attached to ppp0 and
> second to ppp1
> default route is ppp0
> openswan works on both ip address. but real_ip_address2 which is
> attached to ppp1 only accepts ipsec-vpn request from static ip
> addresses. for implement that i add the routing table appropriate
> entry. for instance i assume request come from 188.8.131.52. so i write
> to command line "route add 184.108.40.206 gw ppp1_interface_gw_ipaddress"
> that works well.
It's a bit odd to do it like that. You might want to set the leftnexthop=
to the gw of ppp1.
> i have overcame the problem, with adding an entry to
> /usr/lib/ipsec/_updown at line 386. the entry is /usr/bin/routing.sh
> i have writen down all routing entries to that file. I know that this
> solutions is cursory.
You can use leftupdown=/your/script.sh
> what is the appropriate way to accomplish this. or is this a bug
> revealed at version 2.4.8.
There were bugfixes past 2.4.8 for point to point links and routing. Try
the latest 2.4.x version.
Building and integrating Virtual Private Networks with Openswan:
More information about the Users