<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body text="#000066" bgcolor="#FFFFFF">
On 03/19/2018 10:47 AM, Tobias Brunner wrote:<br>
<blockquote type="cite"
cite="mid:ecd9dd3c-d893-9c3f-c34a-165176e5284d@strongswan.org">
<pre wrap="">Hi,
</pre>
<blockquote type="cite">
<pre wrap="">I'm looking to VPN every machine in a LAN. I infer that this would be
something like a host-to-host config.
</pre>
</blockquote>
<pre wrap="">
Did you have a look at the trap-any scenario?</pre>
</blockquote>
Yes this was one of my many attempts over the past month and a
half. But I found that this locked out all but members of the VPN,
including printers, Zwave hubs, etc, which can not do IPSec. With
no further info nor help I gave up. Anyway, I'm trying to do
swanctl.<br>
<br>
I didn't want passthrough because the idea was to encrypt all
in-transit traffic possible to defeat malefactors already inside,
who may be mirroring switch ports.<br>
<br>
<br>
<br>
</body>
</html>