<html>
<head>
<meta content="text/html; charset=utf-8" http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<p><font face="Helvetica, Arial, sans-serif">Thanks a lot, Tobias!
Really appreciated.<br>
</font></p>
<p> </p>
<blockquote type="cite">
<pre wrap="">I've added some documentation [1]. </pre>
</blockquote>
I read through the hub-and-spoke setup on the internet. Is my setup
actually a hub-and-spoke type? I connect from the gateways directly
to the internet and only the traffic to 192.68.0.0/16 is routed
through VPN. Also the text in [1] mentions A-C whereas the diagram
shows A-D. Is this on purpose?<br>
<br>
<blockquote type="cite">
<pre wrap=""><blockquote type="cite"><pre wrap="">Out of curiosity, how would you configure the server and client if I
would like to add vpn-third subnet with 192.168.3.0?
</pre></blockquote></pre>
<pre wrap="">You'd just add that subnet to the list of remote traffic selectors on
the clients and as local traffic selector on the server and the client</pre>
</blockquote>
So this would (or could) result in the following traffic selectors?<br>
<br>
## IPs:<br>
Server IP = 192.168.0.1 <br>
First GW = 192.168.1.0/24<br>
Second GW = 192.168.2.0/24 <br>
Third GW = 192.168.3.0/24 <br>
<br>
## Server.conf<br>
conn vpn-first<br>
rightsubnet = 192.168.1.0/24<br>
leftsubnet = 192.168.0.0/16<br>
<br>
## First-Gateway.conf<br>
conn vpn-first<br>
rightsubnet = 192.168.0.0/16<br>
leftsubnet = 192.168.1.0/24<br>
<br>
Best regards<br>
Martin<br>
<br>
<pre wrap="">[1] <a class="moz-txt-link-freetext" href="https://wiki.strongswan.org/projects/strongswan/wiki/SubnetsBehindMoreThanTwoGateways">https://wiki.strongswan.org/projects/strongswan/wiki/SubnetsBehindMoreThanTwoGateways</a></pre>
<p> </p>
</body>
</html>