[Openswan Users] Multiple servers with multiple tunnels each
patrickn at xelerance.com
Tue Jun 24 07:03:48 EDT 2014
Rescued from the Spam bucket. Please remember to subscribe to the mailing list before posting to it.
From: David Brezynski <brezy at u.washington.edu>
Subject: Multiple servers with multiple tunnels each
Date: June 23, 2014 at 3:01:50 PM EDT
To: users at lists.openswan.org
I'm working on an IPSEC solution for a number of servers (lets say 4) where I need to encrypt traffic between each server (so each servers needs a tunnel to the other 3) for a distributed application. Traffic should not be encrypted between these servers and any others on the network. All IPs are static.
I'm assuming my only option is to set up individual tunnels in a one to many relationship for each of the servers (see configuration below).
Question - is this the correct approach? Is there more concise configuration I can use so I can reuse the configuration files unchanged on all the servers involved? Anything I'm missing?
In the initial setup I'm using pre-shared keys and my config files (connection definitions and secrets file) are:
host1 host2 : PSK "key in quotations"
host1 host3 : PSK "key in quotations"
host1 host4 : PSK "key in quotations"
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users