<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto"><div>You can refer to samples of strong swan, there are a lot of samples. Maybe it can help you!<br><br>发自我的 iPhone</div><div><br>在 2015年10月26日，17:44，Yanrui Hu <<a href="mailto:yhu@appannie.com">yhu@appannie.com</a>> 写道：<br><br></div><blockquote type="cite"><div><div dir="ltr">Guys,<div>I start a new thread cause this question is more specific.</div><div>To be simple, let me introduce the configuration:</div><div><br></div><div>In file: users</div><div><div>DEFAULT SQL-Group == "restricted", Pool-Name := "main_pool"</div><div> Fall-Through = Yes</div><div><br></div><div>DEFAULT Pool-Name := "tc_pool"</div><div><span style="white-space:pre-wrap"> </span>Fall-Through = Yes</div><div><br></div><div>In file:modules/ippool</div><div><div>ippool main_pool {</div><div> range-start = 172.16.10.1</div><div> range-stop = 172.16.10.254</div><div> netmask = 255.255.255.0</div><div> cache-size = 254</div><div> session-db = ${raddbdir}/db.ipmainpool</div><div> ip-index = ${raddbdir}/db.ipmainindex</div><div> override = no</div><div> maximum-timeout = 0</div><div> }</div><div>ippool tc_pool {</div><div> range-start = 172.16.11.1</div><div> range-stop = 172.16.11.254</div><div> netmask = 255.255.255.0</div><div> cache-size = 254</div><div> session-db = ${raddbdir}/db.ipsecondarypool</div><div> ip-index = ${raddbdir}/db.ipsecondaryindex</div><div> override = no</div><div> maximum-timeout = 0</div><div> }</div></div><div>In file: site-enabled/default</div><div>under accounting and post-auth</div><div><div> if (SQL-Group == "restricted") {</div><div><span style="white-space:pre-wrap"> </span>main_pool<br></div><div> }</div><div> else {</div><div><span style="white-space:pre-wrap"> </span>tc_pool</div><div> }</div></div><div><br></div><div>I have put some user into restricted group in db. and want these users get different ippool, but seems when use main_pool as above, vpn client can not connect. Is there any reason that two ippool can not exist together?</div><div><br></div>-- <br><div><div dir="ltr"><div><div dir="ltr">Best Regards,<br><br>Yanrui Hu<br></div></div></div></div>
</div></div>
<br>
<font color="#808080" size="1"><i>This email may contain or reference confidential information and is intended only for the individual to whom it is addressed. Please refrain from distributing, disclosing or copying this email and the information contained within unless you are the intended recipient. If you received this email in error, please notify us at <a href="mailto:legal@appannie.com" target="_blank">legal@appannie.com</a></i></font><font color="#808080" size="1"><i> immediately and remove it from your system.</i></font>
</div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>Users mailing list</span><br><span><a href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a></span><br><span><a href="https://lists.strongswan.org/mailman/listinfo/users">https://lists.strongswan.org/mailman/listinfo/users</a></span><br></div></blockquote></body></html>