[Openswan Users] Configure net-to-net vpn with both vpn, servers behind adsl nat routers

Paul Wouters paul at xelerance.com
Fri Mar 9 02:06:04 EST 2007


On Fri, 9 Mar 2007, Utkarsh Shah wrote:

> how can both server have same config as they have different networks and
> localserver' ip
>
> one with left configuration: left -> local, reight -> remote,
> and the other: left-> remote, right->local

openswan automatically tries to determine if it is "left" or "right", so you
can re-use the same connection on both ends.

however, when using roadwarrior and server connections, that is on the
client with left=%defaultroute and on the server with right=%any, you
cannot do this, because you would have to specify both "%defaultroute"
and "%any" in the same connection and then openswan cannot determine
if it should be the client or server side.

For all other cases, eg static VPN tunnels, you can re-use the exact
same conn.

Paul


More information about the Users mailing list