Re: FreeSWAN VPN

[John Ferlito <johnf@inodes.org>]

On Sun, Jul 15, 2001 at 01:46:58AM +1000, Jeff Waugh wrote:
> <quote who="Maurice Verhagen">
> 
> > The gateways can't ping eachother
> 
> Please read the documentation -> the gateways will *not* be able to ping
> each other. FreeS/WAN only routes the traffic to and from each subnet behind
> the gateway.

Actually the gateways can ping each other if you add something like this
to your ipsec.conf

conn leftgw-rightgw
        left=61.8.3.162
        leftnexthop=%defaultroute
        right=216.14.192.194
        rightnexthop=%defaultroute
        auto=start
        also=keys

Basically to have all machines on both sides being able to talk to each
othe you need 4 connections
leftgw<->leftgw
leftgw<->leftsub
leftsub<->leftgw
leftsub<->leftsub

-- 
John Ferlito
Senior Engineer - Bulletproof Networks
ph: +61 (0) 410 519 382
http://www.bulletproof.net.au/