[Openswan Users] change to NAT rules so pulic IP address of openswan boxes accessible from remote LAN?
paul at xelerance.com
Mon Jan 10 23:10:54 EST 2011
On Mon, 10 Jan 2011, M B wrote:
> ok.. so, if the public IP address is not part of the tunnel why are the openswan boxes sending packets to the pub IPs across the tunnel?
It is part of the tunnel, but not in a regular way.
> here's my connection for the subnet-subnet tunnel:
> conn LANWC-TO-LANEC
if your openswan box does not have either 69.105.X.X or 173.12.X.X configured on the box
itself, this will not work. You need to define your end by its local ip.
> what would i need to add to setup the subnet-public IP connection? something like:
> conn LANWC-TO-ECPUB
If you need the /29 then yes. If you just need the one IP, and it is the same as right
itself, you can just leave out rightsubnet=
More information about the Users