I have two 32 bit Ubuntu running on VMware on a windows 7 host. I followed
the steps given in
IPSEC VPN on Ubuntu 15.04 with StrongSwan
​ (​https://raymii.org/s/tutorials/IPSEC_vpn_with_Ubuntu_15.04.html ) to
install Strongswan.
I need help with a scenario which is a little similiar to issue:1518 (
https://wiki.strongswan.org/issues/1518);
that is, I want to have IPsec tunnels from
multiple
​IPs ​each
to be established from Ubuntu
​2(client)
 to a single IP on Ubuntu
​1(server),​
​ ( like : many to one ; tunnels to a concentrator ). Is this possible? If
so, please help me.
My ipsec.conf are attached.​
​Ubuntu 1 (SERVER): 192.168.157.131
​Ubuntu 2 (SERVER): 192.168.157.132
Thank You

​

*KALESH*
​#CLIENT SIDE (multiple IPs)
config setup
        cachecrls=no
        strictcrlpolicy=ifuri
        uniqueids=keep
conn %default
        reauth=no
        rekey=no
        dpdaction=none
        mobike=no
        keyingtries=%forever
        keyexchange=ikev2
        esp=aes-sha1!
        auto=start
conn 0_192_168_157_132
                # -- Local --
                left=192.168.157.132
                leftauth=psk
                leftsourceip=%config
                # -- Peer --
                right=192.168.157.131
                rightauth=psk
                auto=start
conn 0_192_168_157_133XXXXXX
                # -- Local --
                left=192.168.157.133
                leftauth=psk
                leftsourceip=%config
                # -- Peer --
                right=192.168.157.131
                rightauth=psk
                auto=start

conn 0_192_168_157_2
                # -- Local --
                left=192.168.157.2
                leftauth=psk
                leftsourceip=%config
                # -- Peer --
                right=192.168.157.131
                rightauth=psk
                auto=start
conn 0_192_168_157_3
                # -- Local --
                left=192.168.157.3
                leftauth=psk
                leftsourceip=%config
                # -- Peer --
                right=192.168.157.131
                rightauth=psk
                auto=start
# SERVER SIDE
config setup
        # strictcrlpolicy=yes
        # uniqueids = no
conn %default
        reauth = no
        rekey = no
        dpdaction = none
        keyingtries = %forever
        keyexchange = ikev2
        ike = modp2048
        esp = aes-sha1!
        mobike = no 
        auto = add
conn new_connection_1
        left = 192.168.157.131
        leftauth = psk
        #right = 192.168.157.132
        right = %any
        rightauth = psk
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to