Using virtual ip-addresses for ipsec-clients

neptunus · 10-03-2004, 10:50 AM

Hello,

I've secured my WLAN with a debian-computer which is configured as Ipsec-gateway.
On the debian-gateway I use Openswan 2.2.0 and on the clients which connect as road-warriors to the server I use the built in ipsec-functionalities of Windows 2000.

Currently the situation is, that the connected road-warriors are on a differtent net than the computers of my LAN.

I read something of virtual ip-addresses which can be used by the ipsec-clients. I think so it should possible, that the connected road-warriors could be in the same net than the computers in my LAN.

This is my current network-configuration:

Code:

[Road-Warrior]<---------->[Ipsec-Gateway]<---------->[Router]<--------<Internet>
  |>zB 192.168.1.2   |      |>192.168.1.1      |       |> 10.0.0.3
                     |      |> 10.0.0.11       |       |> ISDN (DHCP)
                     |                         |
                    WLAN                      LAN
                192.168.1.0/24             10.0.0.0/8

Is it possible, to give to the road-warrior 192.168.1.2 a virtual ip? (e.g. 10.0.0.50)

So it would be possible, to communicate to the road-warrior like he is directly connected to the LAN.

Thanks in advance for help.