[strongSwan] Ipsec routing / policy when leftside is part of rideside network

2009-07-03 Thread Andreas Ascheneller
Hello! I will create a VPN based on Strongswan. The IP-Range of the VPN is 172.16.0.0/22. No I have separate this big IP-Range in smaller range with the netmask /29 like that; 172.16.0.0/29 Central VPN Gateway 172.16.0.8/29 || 172.16.0.16

Re: [strongSwan] Ipsec routing / policy when leftside is part of rideside network

2009-07-03 Thread Daniel Mentz
Please refer to Andreas' mail which you can find on https://lists.strongswan.org/pipermail/users/2007-June/001874.html This e-mail describes a very similar problem. You probably have to add something like the following to your ipsec.conf: conn pass leftsubnet=172.16.0.16/29 ri

Re: [strongSwan] Ipsec routing / policy when leftside is part of rideside network

2009-07-04 Thread Andreas Ascheneller
! regards Andreas Ascheneller -Ursprüngliche Nachricht- Von: Daniel Mentz [mailto:danielml+mailinglists.strongs...@sent.com] Gesendet: Samstag, 4. Juli 2009 03:28 An: Andreas Ascheneller Cc: users@lists.strongswan.org Betreff: Re: [strongSwan] Ipsec routing / policy when leftside is part of

Re: [strongSwan] Ipsec routing / policy when leftside is part of rideside network

2009-07-04 Thread Daniel Mentz
Andreas Ascheneller wrote: > So now it works ;-) Great! > I have done the following steps; > > 1.) I have add your "conn" to my ipsec.conf. > conn pass > leftsubnet=172.16.0.16/29 > rightsubnet=172.16.0.16/29 > left=%defaultroute > right=a.b.c.d > type=passthroug

Re: [strongSwan] Ipsec routing / policy when leftside is part of rideside network

2009-07-04 Thread Andreas Ascheneller
An: users@lists.strongswan.org Cc: Andreas Ascheneller Betreff: Re: [strongSwan] Ipsec routing / policy when leftside is part of rideside network Andreas Ascheneller wrote: > So now it works ;-) Great! > I have done the following steps; > > 1.) I have add your "conn" t