<html><head></head><body>Mark, <br>
<br>
conn ip1<br>
also=rw<br>
rightsubnet=<a href="http://172.3.0.39/32">172.3.0.39/32</a><br>
auto=start<br>
<br>
conn ip2<br>
also=rw<br>
rightsubnet=<a href="http://172.3.0.40/32">172.3.0.40/32</a><br>
auto=start<br>
<br>
conn rw<br>
left= *vpnhost*<br>
leftid= blah blah<br>
right=%any or whatever<br>
rightid= blah blah<br>
<br>
Let me know if this helps you. <br>
<br>
Regards, <br>
Vyronas Tsingaras<br><br><div class="gmail_quote">On 29 July 2014 22:09:50 EEST, Mark Gordon <markgne@gmail.com> wrote:<blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">Vyronas, <div><br /></div><div>Thank you for the information. The information is helpful but unfortunately, the client set this up as IKEv1. Any other thoughts?</div><div><br /></div><div>Regards,</div><div>Mark G</div>
</div><div class="gmail_extra"><br /><br /><div class="gmail_quote">On Tue, Jul 29, 2014 at 3:05 PM, Vyronas Tsingaras <span dir="ltr"><<a href="mailto:vtsingaras@it.auth.gr" target="_blank">vtsingaras@it.auth.gr</a>></span> wrote:<br />
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div>Hi Mark, <br />
<br />
rightsubnet=subnetCIDR1, subnetCIDR2<br />
<br />
But only for IKEv2.<br />
<br />
Regards, <br />
Vyronas Tsingaras<br /><br /><div class="gmail_quote"><div><div class="h5">On 29 July 2014 20:39:57 EEST, Mark Gordon <<a href="mailto:markgne@gmail.com" target="_blank">markgne@gmail.com</a>> wrote:</div></div><blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div><div class="h5">
<div dir="ltr">I am fairly new to strongswan and looking for assistance. I need to specify the priviate IP's of the remote hosts. My understanding is normally this would be rightsubnet= . The problem is the remote administrator gave me two hosts and not a subnet. I could specify the subnet but it is sufficiently broad enough that the remote administrator doesn't want to do that. Is there a way to identify two unique hosts and not have to specify the subnet?<div>
<br /></div><div>For example the two hosts could be; <a href="http://172.3.0.39/32" target="_blank">172.3.0.39/32</a> and <a href="http://172.3.0.40/32" target="_blank">172.3.0.40/32</a>. </div><div><br /></div><div>What options, if any, should I configure to allow both hosts to traverse the VPN?</div>
<div><br /></div><div>Thanks!</div><div>Mark G. </div><div>Network Engineer</div></div>
<p style="margin-top:2.5em;margin-bottom:1em;border-bottom:1px solid #000"></p></div></div><pre><hr /><br />Users mailing list<br /><a href="mailto:Users@lists.strongswan.org" target="_blank">Users@lists.strongswan.org</a><br />
<a href="https://lists.strongswan.org/mailman/listinfo/users" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a></pre></blockquote></div><span class="HOEnZb"><font color="#888888"><br />
-- <br />
Sent from my Android device with K-9 Mail. Please excuse my brevity.</font></span></div></blockquote></div><br /></div>
</blockquote></div><br>
-- <br>
Sent from my Android device with K-9 Mail. Please excuse my brevity.</body></html>