<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000000">
Anybody?<br>
<div class="moz-forward-container"><br>
<br>
-------- Forwarded Message --------
<table class="moz-email-headers-table" border="0" cellpadding="0"
cellspacing="0">
<tbody>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">Subject:
</th>
<td>Question on rightsubnet</td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">Date: </th>
<td>Mon, 29 Dec 2014 15:08:49 +0200</td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">From: </th>
<td>Guy Maman <a class="moz-txt-link-rfc2396E" href="mailto:mamang@porticor.com"><mamang@porticor.com></a></td>
</tr>
<tr>
<th align="RIGHT" nowrap="nowrap" valign="BASELINE">To: </th>
<td><a class="moz-txt-link-abbreviated" href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</a></td>
</tr>
</tbody>
</table>
<br>
<br>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
Hi all,<br>
<br>
What is the different between rightsubnet=%dynamic to omit the
rightsubnet?<br>
<br>
I have the same strongswan version on both client and server:<br>
Linux strongSwan U5.1.2/K3.13.0-40-generic<br>
<br>
I read that it's supposed to be the same behaviour:<br>
<i><small>Instead of specifying a subnet, <em>%dynamic</em> can
be used to replace it with the IKE address, having the same
effect<br>
as omitting <em>left|rightsubnet</em> completely</small></i>
<br>
<br>
But for some reason when I omit the "rightsubnet" from the client,
child is created and connection is created.<br>
When rightsubnet=%dynamic it's not working with the error:<br>
<small><i>15[IKE] received INTERNAL_ADDRESS_FAILURE notify, no
CHILD_SA built</i><i><br>
</i><i>15[IKE] failed to establish CHILD_SA, keeping IKE_SA</i></small><br>
<br>
<br>
Thanks<br>
Guy<br>
<br>
<br>
</div>
<br>
</body>
</html>