[strongSwan] Site to Site VPN - One to Many

Noel Kuntze noel at familie-kuntze.de
Tue May 26 13:16:06 CEST 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello,

No, not so easily. You either have to map one of those networks onto another subnet with iptables or use marks to differentiate the traffic.

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 26.05.2015 um 13:15 schrieb mgundes:
> Zhuyj and Noel, thank you.
>
> Zhuyj, regarding route table, what if some different private networks have same subnets? I mean if two organizations have 192.168.2.0/24 <http://192.168.2.0/24> network than would it be possible to properly set route table?
>
> Thanks.
>
> On Tue, May 26, 2015 at 2:05 PM, Zhuyj <mounter625 at 163.com <mailto:mounter625 at 163.com>> wrote:
>
>     Pay attention to route table.
>
>
>     发自我的 iPhone
>
>     > 在 2015年5月26日,18:42,Noel Kuntze <noel at familie-kuntze.de <mailto:noel at familie-kuntze.de>> 写道:
>     >
>     >
> Hello,
>
> Yes, that is possible. Simply create different conn sections.
>
> Mit freundlichen Grüßen/Kind Regards,
> Noel Kuntze
>
> GPG Key ID: 0x63EC6658
> Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
>
> >     >> Am 26.05.2015 um 10:39 schrieb mahmut g:
> >     >>
> >     >> Hello,
> >     >>
> >     >>
> >     >> I need to connect many servers in different private networks. My application should connect and gets data from many(4 or 5) services on that servers. However, I need to create VPN to those network to be able to connect those server. For instance one of the private networks has Cisco 3845 router as vpn hardware and another use some other solution etc.
> >     >>
> >     >>
> >     >> Those private networks are different organizations. I am not good at IPSec and VPN issues, I wonder If it is possible to connect more than one private network from single Linux VPS machine with strongswan?
> >     >>
> >     >>
> >     >> Thanks,
> >     >>
> >     >> Regards.
> >     >>
> >     >>
> >     >> Mahmut
> >     >>
> >     >>
> >     >>
> >     >>
> >     >>
> >     >> _______________________________________________
> >     >> Users mailing list
> >     >> Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
> >     >> https://lists.strongswan.org/mailman/listinfo/users
>
>     >
>     > _______________________________________________
>     > Users mailing list
>     > Users at lists.strongswan.org <mailto:Users at lists.strongswan.org>
>     > https://lists.strongswan.org/mailman/listinfo/users
>
>
>
>
>
> --
> Mahmut Gündeş

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2

iQIcBAEBCAAGBQJVZFX0AAoJEDg5KY9j7GZYmwYP/03DyctKTAVi6dESDm6YfcVi
nwd6iN8eLtkzen0A6HaydrsuIWgz5wocazvpR32vmSHVuAJz1tLhGfFwxYFP7GPY
TSmT9sYS/1KyrnAniJ4I6OiF39OYso3g3IEAuBxtkxWFIKJQCKiKuentN8/Dfh/d
jUu/hKFvlFEK0EArBHlZj1y45IE3EyoVWkW9YKn51BSiJAuq5/84k8Rru7SLDJ13
DDdAGG9CGGYebdr4KpQEwIZZPdOvDD9esMOmUuC7puiddveWs/KZStub6Ab76D25
UrlftBj6jRSP+LsaKFuqwGXakaLadBgRDZmNSAxx/C5GeUeXMeQoGFGVZQgjYi3b
x5pAalWwm8fe4qLjyIWP2bPaJn2QzUaF8lmSUNaMb9uFnTmQ1fpP90kkNJhU7ymW
i8LbtrjwJOoajFCg4vAUhxvU+laEMBEJKHMwhOY/ksTQyDtFS44pptVJVEQNbUHP
noXZR0LahKvZDk2z8ez+O1dwnb9floX5q11klVRnEPhH2dT27QxSV9Bo8Ry3Gu4n
X0D7hSO4MMaMNQtLxGLKXpplBmuagr/V9P2Mz0IDEfN5G/Km4RZsHsfGR/WJRXIx
KV2fraW3xHZEbgTyxOr3GkHXbM8uclnNpek7HSu0CdFOpEwCezSd2TkQhd5+hS+T
3Rq+A//94rQHEGv0I7yG
=fmQK
-----END PGP SIGNATURE-----



More information about the Users mailing list