[Swan] converting to use NAT traversal

Alex mysqlstudent at gmail.com
Fri Jan 3 21:57:52 UTC 2020


Hi,
I've had a site-to-site VPN using libreswan built and working between
two Optonline/Altice systems, one with a dynamic IP and the other with
a static IP, for quite some time, but we've had to move the satellite
office with the dynamic IP to one where we're only given a private
192.168.1.0/24 network and have no access to the outside public IP
interface.

Can I use NAT traversal for this? If so, how do I convert my existing
configuration to use it?

In this config, "wyckoff" is the dynamic (now private IP) side and
"orion" is the static IP side.

conn orion-wyckoff
        ikev2=insist
        authby=rsasig
        auto=add
        dpddelay=10
        dpdtimeout=90
        dpdaction=clear
        rightid=@wyckoff-orion
        rightsubnets={192.168.11.0/24,192.168.10.0/24}
        right=wyckoff.example.com
        rightrsasigkey=0sAwEAAd4EeKjbFI7mmwxfztoH9AfzQUlk7ffvgDNNbj...
        leftid=@orion-wyckoff
        left=orion.example.com
        leftsubnets={192.168.1.0/24,192.168.6.0/24}
        leftrsasigkey=0sAwEAAeSMFxvoJaP54tr660XAjQN35fCKMhi6AxnXMP8iu...


More information about the Swan mailing list