[Openswan Users] PSK works, certificates not

Arno Lehmann al at its-lehmann.de
Tue Jul 17 17:51:42 EDT 2007


Hi,

17.07.2007 19:59,, Jacco de Leeuw wrote::
> 
> Arno Lehmann wrote:
> 
>>> Here you have to specify
>>> leftsubnet=192.168.0.0/24
> 
> Actually, for L2TP/IPsec you don't have to.

I thought so... but at least this doesn't seem to be problematic now.

>>          # nat_traversal=yes
> 
> You may want to enable this once NAT is involved somewhere.

Yup, that's why I already prepared and commented it out.

Before I start struggling with the more interesting things I thought 
I'd quickly set up certificate based auth.

As you know, that plan didn't work ;-)

Arno

> Jacco

-- 
Arno Lehmann
IT-Service Lehmann
www.its-lehmann.de


More information about the Users mailing list