Re: [Users] Freeswan routing problem

Thank you very much. This seems to be the solution I was looking for. I tried a similar solution but did not change the subnet 192.168.0.0 on the client side.
I have some problems to get a connection to the list server. So I send this mail directly to you.
-MiNe-

-----Ursprüngliche Nachricht-----
Von: Sam Sgro [mailto:sam@freeswan.org] Gesendet: Montag, 22. September 2003 08:30 An: users@mj2.freeswan.org; Dr. Michael Neubauer Betreff: Re: [Users] Freeswan routing problem

-----BEGIN PGP SIGNED MESSAGE----- On Saturday 20 September 2003 12:52, Dr. Michael Neubauer wrote:
> I have successfully set up my laptop(172.16.0.20 (XP, and SafeNet) to
my
> linux box (172.16.0.1). Communication works well. The linux box routes
> (without freeswan) to second net 192.169.0.0/24.
>
> After scanning all the FAQ it is at least a hard problem for me:
> Obviously packets from and to the subnet (192) get lost in the tunnel.
>
> But any attempt to change the config to enable routing in the subnet,
> will result a connection error during startup.

Adding this connection should allow traffic for 192.168.0.0/24 to use the
tunnel (after a successful negotiation):

conn minelap2

         rightid=mine@kopv.de
         right=%any
         leftsubnet=192.168.0.0/24
         left=172.16.0.1
         leftcert=router.kopv.Cert.pem

Add a configuration to the XP/Safenet IPsec clients as appropriate.

If that fails, update your barf as the error occurs.

• -- Sam Sgro sam@freeswan.org

-----BEGIN PGP SIGNATURE-----

Version: 2.6.3ia
Charset: noconv
Comment: For the matching public key, finger the Reply-To: address.

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

iQCVAwUBP26W+EOSC4btEQUtAQHQ5QP/bpmyfQmuljj8W6DdwarTYSgWnr3fFuEx uGmrZKSUzWsiVv0Zkn0fDHeGWACgit9fdC2rgczh1R22DVGEFu4slIK8SIMKkb7n WzHaM+/g7eAWu1v9j9ghJj5aHsVO0VEyg1NRb3RdiCRT8LgzZEnou7tO9WypBWyW k3nICpKMbI0=
=cMLY
-----END PGP SIGNATURE-----