<div dir="ltr">Yes, you have to split the connections. I wish I knew this two weeks ago. Here is what I did: <div><br></div><div>conn europe</div><div> keyexchange=ikev1</div><div> ...</div><div> left=..</div><div> leftsubnet=...</div><div> right=...</div><div> rightid=...</div><div> ...</div><div><br></div><div>For the two right subnets, I literally only have the following:</div><div><br></div><div>conn london</div><div> also=europe</div><div> rightsubnet=...1</div><div> auto=start</div><div><br></div><div><div>conn frankfurt</div><div> also=europe</div><div> rightsubnet=...2</div><div> auto=start</div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Nov 19, 2015 at 1:22 PM, Andreas Steffen <span dir="ltr"><<a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Hi Jayapal,<br>
<br>
according to the IKE standards, multiple comma separated subnets work<br>
for IKEv2 only. With IKEv1 you have to define multiple connections<br>
resulting in multiple QUICK_MODEs.<br>
<br>
Regards<br>
<br>
Andreas<span class=""><br>
<br>
On 19.11.2015 11:31, Jayapal Reddy wrote:<br>
</span><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">
<br>
Hi,<br>
<br>
For site to site vpn configuration comma separated multiple subnets for<br>
rightsubnet, Is it working ?<br>
Ex: rightsubnet=<a href="http://192.168.1.0/24,192.168.2.0/24" rel="noreferrer" target="_blank">192.168.1.0/24,192.168.2.0/24</a><br></span>
<<a href="http://192.168.1.0/24,192.168.2.0/24" rel="noreferrer" target="_blank">http://192.168.1.0/24,192.168.2.0/24</a>><span class=""><br>
<br>
In documentation found that it is only supported for ikev2, for ikev1<br>
only first subnet in comma separted is considered. In my setup it seems<br>
only the first one is working.<br>
<br>
In some of the internet posts found that it is working for ikev1 also.<br>
Is this true ?<br>
<br>
Thanks,<br>
Jayapal<br>
<br>
<br>
<br>
<br></span>
_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.strongswan.org" target="_blank">Users@lists.strongswan.org</a><br>
<a href="https://lists.strongswan.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br>
<br><span class="HOEnZb"><font color="#888888">
</font></span></blockquote><span class="HOEnZb"><font color="#888888">
<br>
-- <br>
======================================================================<br>
Andreas Steffen <a href="mailto:andreas.steffen@strongswan.org" target="_blank">andreas.steffen@strongswan.org</a><br>
strongSwan - the Open Source VPN Solution! <a href="http://www.strongswan.org" rel="noreferrer" target="_blank">www.strongswan.org</a><br>
Institute for Internet Technologies and Applications<br>
University of Applied Sciences Rapperswil<br>
CH-8640 Rapperswil (Switzerland)<br>
===========================================================[ITA-HSR]==<br>
<br>
</font></span><br>_______________________________________________<br>
Users mailing list<br>
<a href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br>
<a href="https://lists.strongswan.org/mailman/listinfo/users" rel="noreferrer" target="_blank">https://lists.strongswan.org/mailman/listinfo/users</a><br></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature"><div dir="ltr"><span style="font-size:12.8000001907349px">Sean Blanton, Ph.D.</span><div style="font-size:12.8000001907349px">Quantitative Technologist</div><div style="font-size:12.8000001907349px">Radix Trading, LLC</div><div style="font-size:12.8000001907349px">Desk: 773.985.0456</div><div style="font-size:12.8000001907349px">Cell: 773.960.3495</div></div></div>
</div>