last night, i was migrating my home-network from freeswan to
Currently, I'm still using 0.3rc5. While migrating, I've stumpled across
a few oddities - maybe someone can help me out ;)
Previously, i was using four different tunnels to establish
ipsec-connectivity to four network. I tried to reconstruct this
configuration by defining one remote-site ($GATEWAY) within racoon.conf and
create eight security policies for the four network.
They look like this:
spdadd $PPP_LOCAL/32 172.16.0.0/12 any -P out ipsec
spdadd 172.16.0.0/12 $PPP_LOCAL/32 any -P in ipsec
and so on..
Adding these works fine, all definitons show up within setkey -DP.
But only "one" tunnel works in the end - the tunnel which first receives
packets. This is the only tunnel I see being established on the Gateway
on the other side. The other tunnels don't get set-up when packets
destined for them are created. But obvious packets destined to these
tunnels are sent out over ipsec, because they are not seen plain-text.
The Gateway is using FreeSwan.
Any ideas what I'm missing?