I have got two linux boxes with fc5 on it. one has a static external IP,
another one is connected via cisco and uses address mapping - from the
external cisco IP to a "fake" internal.
How do I set up a net-to-net connection?
Example conf:
conn net-to-net
left=212.220.1.2 # Local vitals
leftsubnet=192.0.2.128/29 #
leftid=@xxxxxxxxxxxxxx #
leftrsasigkey=0s1LgR7/oUM... #
leftnexthop=%defaultroute # correct in many situations
right=212.220.1.1 # Remote vitals
rightsubnet=10.0.0.0/24 #
rightid=@xxxxxxxxxxxxxx #
rightrsasigkey=0sAQOqH55O... #
rightnexthop=%defaultroute # correct in many situations
auto=start # authorizes but doesn't start this
# connection at startup
But whike speaking with .2 IP, it actually statically maps to 172.x.x.x
address of linux box. It is possible to send data from mapped linux, and the
packets come out with normal 212.220.1.2 IP (mapped back).
OpenSwan IPSec however, according to logs, somehow discovers 172.x.x.x address
and refuses to negotiate....
