I use the auto=route to bild a automatic conetion to a host
If I try to use the conection first time I get Resource
temporarily unavailable on the 2. time all works fine. I use
now a ping to open the tunnel but It is not the way I like
>ping sechost
connect: Resource temporarily unavailable
> # ping sechost
PING xxxxxx (xx.xx.xx.xx) 56(84) bytes of data.
64 bytes from xxxxxx (xx.xx.xx.xx): icmp_seq=1 ttl=64
time=67.1 ms
64 bytes from xxxxxx (xx.xx.xx.xx): icmp_seq=2 ttl=64
time=66.5 ms
my configuration openswan 2.4.7
ipsec.conf
version 2.0
config setup
nat_traversal=yes
interfaces=%defaultroute
virtual_private=%v4:10.0.0.0/8,%v4:172.16.0.0/12,%v4:192.168
.0.0/16
fragicmp=yes
plutowait=yes
conn %default
keyingtries=1
authby=rsasig
compress=yes
leftrsasigkey=%cert
rightrsasigkey=%cert
disablearrivalcheck=no
conn tunnel
left=%defaultroute
leftsubnet=192.168.3.2/32
leftnexthop=192.168.3.1
leftcert=tunnel-cert.pem
right=xxx.xxx.xxx.xxx
rightcert=tunnel2.pem
auto=route
pfs=yes
dpddelay=30
dpdtimeout=120
keylife=8m
rekey=no
--
Der GMX SmartSurfer hilft bis zu 70% Ihrer Onlinekosten zu
sparen!
Ideal für Modem und ISDN: http://www.gmx.n
et/de/go/smartsurfer
_______________________________________________
Users openswan.org
http
://lists.openswan.org/mailman/listinfo/users
Building and Integrating Virtual Private Networks with
Openswan:
http://www.amazon.com/gp/product/1904811
256/104-3099591-2946327?n=283155
|