<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body bgcolor="#FFFFFF" text="#000066">
<p>I'm looking to VPN every machine in a LAN. I infer that this
would be something like a host-to-host config.</p>
<p>I'll use swanctl/vici and x509 certs.</p>
<p>I can't identify any configurations that seem right for this at <br>
</p>
<p><a class="moz-txt-link-freetext" href="https://www.strongswan.org/testing/testresults/swanctl/">https://www.strongswan.org/testing/testresults/swanctl/</a></p>
<p>Maybe?
<a class="moz-txt-link-freetext" href="https://www.strongswan.org/testing/testresults/swanctl/ip-pool/index.html">https://www.strongswan.org/testing/testresults/swanctl/ip-pool/index.html</a></p>
<p><br>
</p>
<p>Also, there is a machine outside on the Internet which I'd like
to join the party transparently. It's a mail server, so somehow
I'd like its mail traffic to not be VPNed, but everything else to
be. I guess this might be a roadwarrior with some kind of split
for the mail ports.</p>
<p><br>
</p>
<p><br>
</p>
<p><br>
</p>
</body>
</html>