I've searched high and low for an example of this configuration and couldn't
find anything, so here's my config.  I'm using Gentoo, so the Openswan config
files may be in a different location for other distros.

m0n0wall is setup as per this part of the FAQ:
http://doc.m0n0.ch/handbook/faq.html#id2608395

/etc/ipsec/ipsec.conf:
------------------------------------------------------------------------------
# /etc/ipsec/ipsec.conf - Openswan IPsec configuration file

version 2.0     # conforms to second version of ipsec.conf specification

# basic configuration
config setup
        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        uniqueids=yes

conn %default
        # How persistent to be in (re)keying negotiations (0 means very)
        keyingtries=0

# Add connections here
conn tomonowall
        aggrmode=yes
        ike=3des-sha1-modp1024
        esp=3des-sha1
        authby=secret
        left=%defaultroute
        leftid=@scott at example dot com
        right=59.x.x.x
        rightsubnet=192.168.2.0/24
        rightid=59.x.x.x
        auto=start

#Disable Opportunistic Encryption
include /etc/ipsec/ipsec.d/examples/no_oe.conf
------------------------------------------------------------------------------

Then in /etc/ipsec/ipsec.secrets:
@scott at example dot com 59.x.x.x: PSK "myverylongsecretkey"


Hope this works for someone else.

Sorry about the sig.


-- 
_______________________________________________
Surf the Web in a faster, safer and easier way:
Download Opera 8 at http://www.opera.com

Powered by Outblaze