RE: VPN between multiple LANs

> I have configured cipe between 2 networks without problems. 
> Now I want to add some more and want to be able to reach any 
> one of my LANs from any of the others.

I routinely have 3 or 4 networks tied together.
> 
> So to make it short:
> LAN1<->LAN2 works
> 
> Now I also want:
> LAN1<->LAN3
> LAN2<->LAN3
> LAN1<->LAN4
> LAN2<->LAN4
> LAN3<->LAN4
> and so on

Sure..
> 
> What is the easiest way to do this? Does anybody have a 
> pointer to some diagram or sample setup?

Easiest way is to create an options file for each network, say in /etc/cipe

options.net1
options.net2
options.net3

And configure each one as per normal per network.

Then to setup the links

ciped-cb -o /etc/cipe/options.net1
ciped-cb -o /etc/cipe/options.net2
ciped-cb -o /etc/cipe/options.net3

and so on. :)
> 
> Assuming I use 192.168.1.0/24 for LAN1, 192.168.2.0/24 for 
> LAN2, etc., then looking just at LAN1, I would need one 
> dedicated port for each other LAN I want a cipe connection 
> to. Or can I use the same port for each connection (I tried, 
> but could get it to work)? Can I assign the same IP to all 
> cipbcb adapters in LAN1's tunnel end point, or do I need to 

You will need a separate UDP port for each VPN link, but you can use the
same IP address for all connections terminating on the one host.

> use a different IP for each of them? Right now I have it 
> working by using the same IP for cipcb1 and cipcb2 in LAN1, 
> but I am not sure if this will bring any problems that I am 
> not aware of yet...

Works fine for me, it's point to point, so the cipe devices can use the same
IP.  That's exactly how I do it.

--
Message sent by the [email protected] mailing list.
Unsubscribe: mail [email protected], "unsubscribe cipe-l" in body
Other commands available with "help" in body to the same address.
CIPE info and list archive: <URL:http://sites.inka.de/~bigred/devel/cipe.html>