[Openswan Users] How to config Static-to-Roadwarrior in different openswan version?

[Erich Titl]

Hi

at 27.05.2011 15:26, takanobu watanabe wrote:
> Thanks Erick and Paul,
> 
> But still no luck, I used like that configure by your advices.
> delete rightnexthop=%defaultroute from server side
> add rekey=no to server side
> 
> I did,
> server side: ipsec setup start
> roadwarrior side: ipsec auto --up road
> But result as same as before.
> Then I did
> server side: ipsec setup start
> roadwarrior side: ipsec auto --add road
> But it nothing happen.
> 
> My aim is
> RoadWarrior connects A-machine under IPsec server.
> RoadWarrior <--IPsec--> IPsec sever <--LAN--> A-machine
> RoadWarrior <----------------RDP or VNC------------> A-machine
> I think at first need to establish IPsec,then connect to A-machine.
> When I try Static-to-Static,no problem connect like a above.
> it is static-to-static conf:http://pastebin.com/d7c2s5Q2
> It is strange just one side be %any,then very different result...

So the only difference is

right=192.168.11.3 vs. right=%any

on the server side?

cheers

Erich

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3409 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.openswan.org/pipermail/users/attachments/20110527/422a545c/attachment.bin