[Openswan Users] No Encryption to Linksys WRV200

[Paul Wouters]

On Wed, 20 Aug 2008, Michael Roessler wrote:

> Although the connection seems to be established a ping from openswan-gw to Linksys-gw is unencrypted.

> conn net-to-net
>
>        left=213.23.xx.yy
>        leftsubnet=192.168.xx.yy/24
>        right=220.232.yy.zz
>        rightsubnet=192.168.yy.zz/24

This tunnel only covers 192.168.xx.yy/24 to 192.168.yy.zz/24.
Pinging from the gateway with use either 213.23.xx.yy or 220.232.yy.zz, which is not covered by your
tunnel.

Easy way out, if you can talk between gateways on their internal IP's is to add:

 	leftsourceip=192.168.x.y
 	rightsourceip=192.168.y.z

alternatively, you can add tunnels for 213.23.xx.yy <-> 192.168.yy.zz/24 and 192.168.xx.yy/24 <-> 220.232.yy.zz
and 213.23.xx.yy <-> 220.232.yy.zz

Paul