[Openswan Users] Is there a way to exclude subsets of a super net when defined as the right or left subnet?

Paul Wouters paul at xelerance.com
Sat Dec 19 13:31:01 EST 2009

On Fri, 18 Dec 2009, Robyn Orosz wrote:

> I need connect to a device that is attached to several remote networks within the range.  Rather
> than creating several tunnels I just summarized the remote subnet as  The problem is that this
> includes my own local subnet so when locally connected hosts attempt to access the VPN device at,
> they are unable to as it appears that this traffic gets redirected onto the tunnel.

It's a problem with NETKEY only, not KLIPS. On NETKEY you need to add a "passthrough"
for anything that is local:

# my local range is
conn pass-local

More information about the Users mailing list