[Openswan Users] How do I definitively tell openswan what interface I want to use?

[Greg Scott]

Hopefully this is easy.  I have some bridged setups with ipsec tunnels
where device br0 has multiple IP Addresses.  When Openswan starts up, it
looks like it picks the first IP Address on the br0 interface to
announce what it's picking.  In case it picks wrong one of these days,
how do I tell it definitively which IP Address on which interface?  Or
is this just an opening announcement and I don't need to worry about it?

 

My conn definitions are good and this tunnel seems just fine from the
testing I've done so far.  In this case, the first IP Address on
interface br0 is the private one and I'm used to Openswan announcing the
public one.  

 

[root at audubon-fw1 ~]# service ipsec restart

ipsec_setup: Stopping Openswan IPsec...

ipsec_setup: stop ordered, but IPsec appears to be already stopped!

ipsec_setup: doing cleanup anyway...

ipsec_setup: Starting Openswan IPsec
U2.6.25/K2.6.33.5-112.fc13.i686.PAE...

ipsec_setup: multiple ip addresses, using  10.0.0.10 on br0

[root at audubon-fw1 ~]#

 

Thanks

 

-          Greg Scott

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20100609/b2434093/attachment.html