If I put left=w.x.y.z
, where "w.x.y.z" is the actual IP-address of my ethernet port, into the conn
(ection) entry in ipsec.conf
, then I can proceed.
But, obviously, I shouldn't
have to specify any hard-coded address. There must be another, obvious
way to specify that "the connection is 'from here.'"
" gives the same "can't identify" message as before.