[Openswan Users] Multiple subnets through 1 tunnel

[Peter McGill]

Andy,

Openswan does not allow you to route traffic into the tunnel.
Only traffic within the subnet definitions is routed into the tunnel.
The correct way to route an additional subnet is to add another tunnel.
Create a duplicate conn definition with a new name and the new subnet.
Have the admin of the remote device add the new subnet.

Note with new versions, I believe 2.6.x you can add multiple subnets
in a single conn definition with rightsubnets="192.168.2.0/24, 172.16.2.0/24".
However I am not sure if this is produces a single tunnel or still multiple
tunnels (one per subnet).

Peter McGill
IT Systems Analyst
Gra Ham Energy Limited 

> -----Original Message-----
> From: users-bounces at openswan.org 
> [mailto:users-bounces at openswan.org] On Behalf Of Andy Van den Heede
> Sent: September 9, 2008 10:40 AM
> To: users at openswan.org
> Subject: [Openswan Users] Multiple subnets through 1 tunnel
> 
> Hello,
> 
>  
> 
> I have a successful VPN tunnel between my local subnet 
> 192.168.1.0/24 (Openswan device) and an external subnet 
> 192.168.2.0/24 (Another device not managed by me).
> 
> At the other device there is also another subnet 
> 172.16.2.0/24 active that I need to access through this tunnel.
> 
>  
> 
> How can I configure my device to route this also through this 
> existent tunnel?
> 
>  
> 
> I did a test with following command:
> 
> ip route add 172.16.2.0/24 via 192.168.2.254 dev eth0 src 
> 192.168.1.254
> 
>  
> 
> But I get this error:
> 
> RTNETLINK answers: Network is unreachable
> 
>  
> 
> Thanks in advice,
> 
> Andy Van den Heede
> 
>  
> 
>