[Openswan Users] Tunnel headends

[Paul Wouters]

On Sat, 24 Mar 2007, Andrei-Florian Staicu wrote:

> This is a little bit awkward. I was hoping to get a virtual wire. My
> tunnel example was simplistic, because behind each server i have at
> least 4 private subnets. If what you are saying is true, for 2 locations
> with 4 subnets each, i need 16 tunnels. And i have 12 locations.
>
> Thanks for all your help, it seems i'm back to the drawing board.


You can have tunnels like 10.0.0.0/8 ==== 10.a.b.0/24, so if you have
a spoke structure, your leaves only need one tunnel to the center.

As an alternative, you can use GRE or IPinIP between the tunnels, so
that you create your "virtual wire".

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155