[Openswan Users] Pass through connections

Paul Wouters paul at xelerance.com
Mon Dec 22 12:19:47 EST 2008


On Mon, 22 Dec 2008, Philip Mountifield wrote:

> I have what should be a trivial task to achieve but I can't seem to find 
> the appropriate configuration.
> 
> I have 2 Openswan servers, one in the subnet 192.168.1.0/24 and one in 
> the subnet 192.168.0.0/16. I have a tunnel between the two. The obvious 
> problem is that when the tunnel is up the 192.168.1.0/24 end of the 
> tunnel sends all the traffic down the tunnel, as you expect with netkey. 

try:

conn passthrough
        type=passthrough
	authby=never
        left=YourServerIP
        leftnexthop=YourGwIP
	leftsubnet=192.168.1.0/24
        right=0.0.0.0
        rightsubnet=0.0.0.0/0
        auto=route

> Could someone please clarify how this connection should be done as is 
> does not seem to work when setup as the example in the big openswan book 
> or any others I've found on the web.

If you were using KLIPS, it would just work.

Paul


More information about the Users mailing list