[Users] ipsec on dial-up link

From: Kuba Leszewski (k.leszewski_at_ce3.pl)
Date: Tue Aug 27 2002 - 12:49:20 CEST


Hi,

I was wondering how to solve such problem.

I have Freeswan running on a dial-up link. It receives dynamic
public-class IP address, every time it connects.
Then it starts freeswan and establishes a SA.

The other end of this connection has got a static IP address.

So situation is like this:
[lan A] --- gateway A -------[INTERNET]---------gateway B ---- [lan B]
                                  dial-up leased

When A disconnects then there's no problem. The SA is dropped, and when
it connects again, SA is established again.

Problem is when B disconnects (i.e. computer shutdown).
A doesn't know it has to drop a SA and initiate a new one.
B cannot initiate SA to A, because it doesn't know A's IP address.
In this situation someone in location A has to reset the modem, to stop
and start connection, and have IPSec establish a new SA.
I'd like this process to be automatic.

I hope everything is clear, and someone can help me solve this problem.

Regards
Kuba

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.4 : Tue Aug 27 2002 - 16:20:17 CEST