[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openswan-users
Subject:    Re: [Openswan Users] openswan double nat +psk
From:       Tsitsi <mediatsitsi-vpn () yahoo ! fr>
Date:       2006-01-24 8:38:26
Message-ID: 20060124083826.89188.qmail () web26701 ! mail ! ukl ! yahoo ! com
[Download RAW message or body]


--- Paul Wouters <paul@xelerance.com> a écrit :

> On Fri, 20 Jan 2006, Tsitsi wrote:
> 
> > subnet A
> > > 
> > > vpn openswan|
> > > (private IP)
> > > router NAT|
> > > 
> > internet
> > > 
> > > router NAT|
> > > (private IP)
> > > vpn openswan|
> > > 
> > subnetB
> > 
> > Does this configuration work with the actual
> version
> > of openswan using PSK authentification?
> 
> It should, but you are SO MUCH better of using raw
> rsa keys.
> It is a 100 fold easier to setup and does not depend
> on IP's
> 
> Paul
> 
> 

Thank you, it works, 
I must use ids instead of IP address to the
ipsec.secrets:

@idleft @idright : PSK "xxxxx"


 


	

	
		
___________________________________________________________________________ 
Nouveau : téléphonez moins cher avec Yahoo! Messenger ! Découvez les tarifs \
exceptionnels pour appeler la France et l'international. Téléchargez sur \
http://fr.messenger.yahoo.com _______________________________________________
Users mailing list
Users@openswan.org
http://lists.openswan.org/mailman/listinfo/users


[prev in list] [next in list] [prev in thread] [next in thread]