[Openswan Users] l2tp over ipsec

Ray@truedays.org ray at truedays.org
Mon Apr 23 11:28:24 EDT 2012


Hi,

I'm a bit confused, How can I specify what IP address will be given to
ipsec0 device (using klips)

excerpt of my [only] conn directive:
conn test
left=192.167.5.110
leftsubnet=192.167.5.110/32
leftnexthop=192.167.5.120
leftid=192.167.5.110
right=192.167.5.120
rightsubnet=192.167.5.120/32
rightnexthop=192.167.5.110
rightid=192.167.5.120
aggrmode=no
keyexchange=ike
authby=secret
ike=3des-md5-modp1024
ikelifetime=28800s
auth=esp
pfs=yes
esp=des-sha1
keylife=3600s
auto=start


The above /etc/ipsec.conf excerpt gives my ipsec0 device the same IP
address as eth0, whereas I would like to have the device have a unique
IP. Regardless of what IPs I put in the ipsec.conf it appears to share
the IP of eth0.

This is all done in a test environment, eventually eth0 will be a
public IP, and I hope to tunnel eth1 (private lan) via l2tp over
ipsec0.

Any guidance is appreciated!


More information about the Users mailing list