[Openswan Users] leftsubnet: cann address more than one network?

Patrick Ford fenderdood at gmail.com
Tue Jan 16 11:46:06 EST 2007


Sandro,

I used to have to do thi one a lot.   Add this to your ipsec.conf file...

conn left-right
             type=tunnel
             #
             leftsubnet=172.16.6.110/24
             left=xxx.xxx.xxx.xxx
             #
             right=yyy.yyy.yyy.yyy
             rightsubnet=172.26.23.224/27
             #

On 16/01/07, Sandro Dentella <sandro at e-den.it> wrote:
>
> Hi all,
>
> I have this setup *correctly working*
>
>       conn left-right-2
>               type=tunnel
>               #
>               leftsubnet=172.16.6.110/24
>               left=xxx.xxx.xxx.xxx
>               #
>               right=yyy.yyy.yyy.yyy
>               rightsubnet=172.26.25.129/32
>               #
> That should do the trick (This is in addition to the config you already
> have.
>
>
>
>           fwA                    gwA                     gwB     netB
> cliB
> netM                                               IPSec
> netN      172.16.6.110/24 <----> 172.16.6.254- xxx <===> yyy-172.26.23.224
> /27
> netO
>
>    now the customer wants to reach  netM from netB addressing it as
>    172.26.25.129-129...
>
>    Is it any possible to set more than 1 leftsubnet?
>    Should I create more tunnels?
>
>    Any hint is appreciated
>    thanks in advance
>
>    sandro
>    *:-)
>
>
> --
> Sandro Dentella  *:-)
> http://www.tksql.org                    TkSQL Home page - My GPL work
> _______________________________________________
> Users at openswan.org
> http://lists.openswan.org/mailman/listinfo/users
> Building and Integrating Virtual Private Networks with Openswan:
> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>



-- 

"Education is what remains after one has forgotten what one has learned in
school."
     Albert Einstein
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20070116/6f1aa0cb/attachment.html 


More information about the Users mailing list