[Openswan Users] How to config Static-to-Roadwarrior in different openswan version?
paul at xelerance.com
Thu May 26 20:48:06 EDT 2011
On Thu, 26 May 2011, Erich Titl wrote:
> on 26.05.2011 17:53, takanobu watanabe wrote:
>> Thanks Enrich,
>>> The log says it all, you did not authorize a connection.
>>> For tests use
>>> ipsec auto --up road
You cannot --up a roadwarrior. You don't know where they are. You can at most
load the connection using ipsec auto --add road. Unless I missed context
and this was the client side of the roadwarrior, where it is fine.
>>> or modify your config file accordingly
auto=up is not valid. It is auto=add or auto=start. For roadwarriors, on
the server side use auto=add (and rekey=no)
>>>> conn road
The rightnexthop= is not used here. You migh as well leave it out
> typically I _believe_ you would define
You can not do that, as openswan in this case cannot determine if it is
left or right, since both ends are dynamic.
More information about the Users