[Openswan Users] Cross Site Connectivity

[Leonard Wood]

I have a single Openswan deployment (2.6.38/K4.2.0-27-generic) currently
connected to two sites-Site A and Site B.  Let's call my OpenSwan deployment
Site C.

 

I need to have Site A private subnet communicate with Site B private subnet,
and vice versa.

 

Site A Private Subnet = 10.10.0.0/16

Site B Private Subnet = 10.0.0.0/8

Site C Private Subnet = 192.168.1.0/24 (OpenSwan Deployment Subnet)

 

As of current, I can only communicate to/from Site A from Site C and I can
only communicate to/from Site B from Site C. 

 

Any suggestions how to accomplish cross site connectivity so Site A and
communicate with Site B through Site C and vice versa?

 

Secondly, do you see any security concerns with this approach? Could traffic
be intercepted or read in plaintext from my OpenSwan instance (Site C) since
it's essentially acting as MITM?

 

Many thanks in advance!

 

Leo

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openswan.org/pipermail/users/attachments/20160225/a9a868fa/attachment.html>