Note: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

Re: [Users] Network-to-Network VPN with dynamic IP on one side

From: Christopher Barry (cbarry_at_infiniconsys.com)
Date: Fri Jun 28 2002 - 17:36:24 CEST

Next message: King Yung Tong: "Re: [Users] IPSEC header?"
Previous message: Hanumanth Rao: "[Users] DUPLICATED PACKET ERROR"
In reply to: Segree, Gareth: "RE: [Users] Network-to-Network VPN with dynamic IP on one side"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Hi,
Can you further explain what your IP addresses in the below example are for?
I too have a similar situation, as I am moving to a new home DSL ISP that
gives out DHCP addresses, and I need to convert my current fixed ip setup to
tag into work.

Thanks a bunch,

-Christopher

On Thursday 27 June 2002 03:49 pm, Segree, Gareth wrote:
> no problem
> ipsec.conf on 10.1.1.0/24 side
> left=208.138.31.25
> leftsubnet=89.0.0.0/8
> leftnexthop=208.138.31.1
> right=%defaultroute
> rightnexthop=
> rightsubnet=172.16.1.0/24
>
> ipsec.conf on 172.16.1.0/24 side
> left=%defaultroute
> leftsubnet=10.1.1.0/24
> leftnexthop=
> right=0.0.0.0
> rightnexthop=
> rightsubnet=172.16.1.0/24
>
> I have this working in production.
>
> -----Original Message-----
> From: Facundo [mailto:facundo_at_sisat.com.ar]
> Sent: Thursday, June 27, 2002 9:35 AM
> To: users_at_lists.freeswan.org
> Subject: [Users] Network-to-Network VPN with dynamic IP on one side
>
>
>
> Is this at all possible? I'm trying to connect two private-IP networks,
> one of the gateways having a dynamic IP address. The setup is as follows:
>
> 10.1.1.0/24 172.16.1.0/24
>
>
> 10.1.1.1 172.16.1.1
> Gateway Gateway
> Dynamic_IP-----[ Internet ]-----Fixed_public_IP
>
> I wrote both ipsec.conf's based on what I can understand from the
> documentation, but I only reached the point where I can ping any
> address of the 172.16.1.0 network from the gateway with dynamic IP,
> but I need also to reach 10.1.1.0 network from the other side.
> Thanks in advance for any suggestion, regards.
>
>
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
> _______________________________________________
> Users mailing list
> Users_at_lists.freeswan.org
> http://lists.freeswan.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users

Next message: King Yung Tong: "Re: [Users] IPSEC header?"
Previous message: Hanumanth Rao: "[Users] DUPLICATED PACKET ERROR"
In reply to: Segree, Gareth: "RE: [Users] Network-to-Network VPN with dynamic IP on one side"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:20:17 CEST