[Openswan Users] multiple subnets ?

Indunil Jayasooriya indunil75 at gmail.com
Wed Jun 25 05:54:05 EDT 2008


Hi Users,

I am testing a vpn setup with Openswan on CentOS 5 Server. I have
installed the below RPM pkg.

openswan-2.4.9-2.el5.kb.i386.rpm

im my side , I have only one subnet which is the leftsubnet.
But, in other sides, there are 4 subnets . I added those 4 subnets to
rightsubnet. pls see my /ect/ipsec.conf file for it.

here is my ipsec.conf file



[root at box ~]# cat /etc/ipsec.conf
# /etc/ipsec.conf - Openswan IPsec configuration file
#
# Manual:     ipsec.conf.5
#
# Please place your own config files in /etc/ipsec.d/ ending in .conf

version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        interfaces=%defaultroute
        # Debug-logging controls:  "none" for (almost) none, "all" for lots.
        klipsdebug=all
        plutodebug=all

conn tunnelipsec
        type=tunnel
        left=1.2.3.4
        leftsubnet=192.168.1.0/24
        right=5.6.7.8
        rightsubnet=10.10.49.0/24
        rightsubnet=192.168.46.0/24
        rightsubnet=192.168.50.0/24
        rightsubnet=192.168.55.0/24
        esp=3des-md5
        authby=secret
        keyexchange=ike
        pfs=no
        auto=start

#Disable Opportunistic Encryption
include /etc/ipsec.d/examples/no_oe.conf


After restaring the service, I get below error.
It  says

duplicated parameter "rightsubnet"

Pls see below

 tail -f /var/log/messages

Jun 25 15:16:31 localhost ipsec__plutorun: ipsec_auto: fatal error in
"tunnelipsec": (/etc/ipsec.conf, line 42) duplicated parameter
"rightsubnet"

Can't OpenSwan have 4 subnets ? If so, Is there another pkg for it?

Pls let me know ASAP.



-- 
Thank you
Indunil Jayasooriya


More information about the Users mailing list