Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.os.linux.misc > #5411

Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor

From Chris Davies <chris-usenet@roaima.co.uk>
Newsgroups comp.os.linux.misc
Subject Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor
Date 2012-05-24 15:40 +0100
Organization Roaima. Harrogate, North Yorkshire, UK
Message-ID <1st199x5kt.ln2@news.roaima.co.uk> (permalink)
References <oigg89x2j4.ln2@news.roaima.co.uk> <jp7uct$1t8$1@dont-email.me> <9hov89xkj4.ln2@news.roaima.co.uk> <jplca7$9o4$1@dont-email.me>

Show all headers | View raw


J G Miller <miller@yoyo.org> wrote:
> Strongswan is a major piece of software so you will not understand it
> all in one day. (I only understand a few small parts of it after
> struggling with it for quite a while to understand the configuration
> file parameters).

Yes, I appreciate that  :-)


> Remember though that if you have
>       pcA  ----->  router1 ======== router2  <------  pcB

> then the IPSEC is a tunnel going from pcA to pcB through router1
> and router2.

Yes, true. But fortunately my scenario is slightly simpler:
	pcA  ----->  router1  =====/=====  router2[endpoint]


What I'm finding most strange is that the private IP address for pcA on
my own LAN is being propagated into the network behind router2. So when
I connect to a device that's on router2's LAN it sees the connection
coming from my own LAN's private address space. This doesn't feel right:
I would have expected pcA to be leased an address from the address
space owned/managed by router2. (I think there are options to provide
a static IP address but not a dynamic one from a pool. I'll have to do
more reading. Later.)

Cheers,
Chris

Back to comp.os.linux.misc | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

PPTP and NAT, IPSec and vpnc to Draytek Vigor Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-18 01:09 +0100
  Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor Stan Bischof <stan@worldbadminton.com> - 2012-05-18 13:30 +0000
    Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-19 01:07 +0100
      Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor The Natural Philosopher <tnp@invalid.invalid> - 2012-05-19 01:16 +0100
  Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor J G Miller <miller@yoyo.ORG> - 2012-05-19 10:58 +0000
    Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-23 19:57 +0100
      Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor J G Miller <miller@yoyo.ORG> - 2012-05-24 13:15 +0000
        Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-24 15:40 +0100
          Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor J G Miller <miller@yoyo.ORG> - 2012-05-24 15:49 +0000
            Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-24 23:54 +0100
              Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor J G Miller <miller@yoyo.ORG> - 2012-05-25 00:10 +0000
                Re: PPTP and NAT, IPSec and vpnc to Draytek Vigor Chris Davies <chris-usenet@roaima.co.uk> - 2012-05-25 08:51 +0100

csiph-web