我有这个隧道已经工作，但现在我需要添加两个ips 10.50.240.48 / 28和10.50.96.0/20。 我在openswanconfiguration中正确地设置了我的左，右，左和右子网。 它已经工作，但我只是增加了两个部分：
leftsubnets= {10.122.91.0/24 10.153.136.0/24 10.50.240.48/28 10.50.96.0/20 10.37.200.0/24 10.53.221.0/24} 然后，因为我的shorewall防火墙已经被configuration为接受来自这个隧道的stream量，所以我只需要在/ etc / shorewall / interfaces中为这两个添加的IP地址添加两个广播：
#ZONE INTERFACE BROADCAST OPTIONS ... vpn2 tun2 10.122.91.255,10.153.139.255,10.50.240.63,10.50.111.255,10.37.200.255,10.53.221.255
以下是ipsec auto –status的一些输出：
000 #993: "wyless/1x0" [email protected] esp.c50b26e3@myip [email protected] tun.0@myip ref=0 refhim=4294901761 000 #977: "wyless/1x0":500 STATE_MAIN_R3 (sent MR3, ISAKMP SA established); EVENT_SA_REPLACE in 1618s; newest ISAKMP; lastdpd=59s(seq in:0 out:0); idle; import:admin initiate 000 #994: "wyless/2x0":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 27432s; newest IPSEC; eroute owner; isakmp#977; idle; import:admin initiate 000 #994: "wyless/2x0" [email protected] esp.30d47987@myip [email protected] tun.0@myip ref=0 refhim=4294901761 000 #995: "wyless/3x0":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 26959s; newest IPSEC; eroute owner; isakmp#977; idle; import:admin initiate 000 #995: "wyless/3x0" [email protected] esp.1b465e60@myip [email protected] tun.0@myip ref=0 refhim=4294901761 000 #551: "wyless/4x0":500 STATE_QUICK_R2 (IPsec SA established); EVENT_SA_REPLACE in 5719s; newest IPSEC; eroute owner; isakmp#542; idle; import:not set 000 #551: "wyless/4x0" [email protected] esp.5b253e7a@myip [email protected] tun.0@myip ref=0 refhim=4294901761 000 #996: "wyless/5x0":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 27444s; newest IPSEC; eroute owner; isakmp#977; idle; import:admin initiate 000 #996: "wyless/5x0" [email protected] esp.ceb8c9d5@myip [email protected] tun.0@myip ref=0 refhim=4294901761 000 #559: "wyless/6x0":500 STATE_QUICK_I2 (sent QI2, IPsec SA established); EVENT_SA_REPLACE in 5076s; newest IPSEC; eroute owner; isakmp#542; idle; import:admin initiate 000 #559: "wyless/6x0" [email protected] esp.3b11db56@myip [email protected] tun.0@myip ref=0 refhim=4294901761 000
任何想法如何我可以进一步解决这个问题？