[Openswan Users] Multiple Connections

Jeremy Schaeffer kb9mfd at phonesplus.biz
Wed May 15 13:19:57 UTC 2013


I cannot get multiple connections to work at the same time. If I connect 
them one at a time they work, but if one is connected, the second one 
kicks that one off and then they fight back and forth logging in and 
out. What am I missing? This worked a year ago but I stopped using it 
and I am now back to using it and something changed. I am using a newer 
version so maybe is a version thing. All the clients are dynamic 
addresses, using Netgear FVS318G units, server is static.  Here is the 
config -

config setup
         interfaces=%defaultroute
         myid=@vpn.****.biz
         nat_traversal=yes
         oe=off
         protostack=netkey
         syslog=syslog.info
         virtual_private=%v4:172.29.0.0/16
         # Enable this if you see "failed to find any available worker"
         # nhelpers=0

#You may put your configuration (.conf) file in the "/etc/ipsec.d/" and 
uncomment this.
#include /etc/ipsec.d/*.conf

conn VOIP-VPN
         auth=esp
         authby=secret
         auto=add
         dpdtimeout=30
         dpddelay=60
         dpdaction=clear
         ike=3des-md5;modp1024
         ikelifetime=8h
         salifetime=8h
         left=69.12.16.29
         leftid=@vpn.****.biz
         leftnexthop=69.12.16.29
         leftsourceip=172.28.130.9
         leftsubnet=172.28.130.1/24
         pfs=yes
         phase2alg=3des-md5;modp1024
         right=%any
         rightnexthop=%defaultroute
         rightsubnet=vhost:%priv,%no

conn Local-VPN
         auth=esp
         authby=secret
         auto=add
         dpdtimeout=30
         dpddelay=60
         dpdaction=clear
         ike=3des-md5;modp1024
         ikelifetime=8h
         salifetime=8h
         left=69.12.16.29
         leftid=@vpn.****.biz
         leftnexthop=69.12.16.29
         leftsourceip=172.28.101.9
         leftsubnet=172.28.101.1/24
         pfs=yes
         phase2alg=3des-md5;modp1024
         right=%any
         rightnexthop=%defaultroute
         rightsubnet=vhost:%priv,%no


   -- Jeremy



More information about the Users mailing list