[Openswan Users] Trouble with a Star Topo

[Luis Nagaki]

For me my VPN / Firewalls are not on NAT .. the clients are.

Any howto out there for SAref kernel support, under 5.3 Centos?


On Wed, Feb 27, 2013 at 11:24 AM, Alex Crow <acrow at integrafin.co.uk> wrote:

>  If your servers are behind that NAT then it will be required on them. If
> the clients are as well you'll need it on them too.
>
> What does your overall topology look like?
>
> Alex
>
>
> On 27/02/13 16:22, Luis Nagaki wrote:
>
> just a quick one.. on the central server or the client?
>
>
> On Wed, Feb 27, 2013 at 11:16 AM, Luis Nagaki <luis.nagaki at gmail.com>wrote:
>
>> Yes behind NAT, let me research how to do such.
>>
>>
>> On Wed, Feb 27, 2013 at 11:12 AM, Alex Crow <acrow at integrafin.co.uk>wrote:
>>
>>>  Are your servers behind NAT? If so you will probably need to rebuild
>>> the kernels with the SAREF patches.
>>>
>>>
>>> On 27/02/13 15:31, Luis Nagaki wrote:
>>>
>>>  Hey guys, i did not notice until it was deployed that 3 of the
>>> locations i sent a Openswan server to had a star topo. All their offices go
>>> through a central office and then out to the internet. the 1st location
>>> connected just fine but when the 2nd came on it through the 1st off. How
>>> can i go around this to make i work?
>>>
>>>  --
>>> This message has been scanned for viruses and
>>> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and
>>> is
>>> believed to be clean.
>>>
>>> _______________________________________________Users at lists.openswan.orghttps://lists.openswan.org/mailman/listinfo/users
>>> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
>>> Building and Integrating Virtual Private Networks with Openswan:http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>>>
>>>
>>>
>>> --
>>> This message is intended only for the addressee and may contain
>>> confidential information.  Unless you are that person, you may not
>>> disclose its contents or use it in any way and are requested to delete
>>> the message along with any attachments and notify us immediately.
>>>
>>> "Transact" is operated by Integrated Financial Arrangements plc
>>> 29 Clement's Lane, London  EC4N 7AE
>>> Tel: (020) 7608 4900 Fax: (020) 7608 5300
>>> (Registered office: as above; Registered in England and Wales under number: 3727592)
>>> Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)
>>>
>>>
>>> _______________________________________________
>>> Users at lists.openswan.org
>>> https://lists.openswan.org/mailman/listinfo/users
>>> Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
>>> Building and Integrating Virtual Private Networks with Openswan:
>>> http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
>>>
>>>
>>
>
> --
> This message has been scanned for viruses and
> dangerous content by *MailScanner* <http://www.mailscanner.info/>, and is
> believed to be clean.
>
>
>
> --
> This message is intended only for the addressee and may contain
> confidential information.  Unless you are that person, you may not
> disclose its contents or use it in any way and are requested to delete
> the message along with any attachments and notify us immediately.
>
> "Transact" is operated by Integrated Financial Arrangements plc
> 29 Clement's Lane, London  EC4N 7AE
> Tel: (020) 7608 4900 Fax: (020) 7608 5300
> (Registered office: as above; Registered in England and Wales under number: 3727592)
> Authorised and regulated by the Financial Services Authority (entered on the FSA Register; number: 190856)
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20130227/5e9170ab/attachment.html>