[strongSwan-dev] [strongSwan] Fwd: Multiple right subnets with ikev1

[Andreas Steffen]

Hi Jayapal,

according to the IKE standards, multiple comma separated subnets work
for IKEv2 only. With IKEv1 you have to define multiple connections
resulting in multiple QUICK_MODEs.

Regards

Andreas

On 19.11.2015 11:31, Jayapal Reddy wrote:
>
> Hi,
>
> For site to site vpn configuration comma separated multiple subnets for
> rightsubnet, Is it working ?
> Ex: rightsubnet=192.168.1.0/24,192.168.2.0/24
> <http://192.168.1.0/24,192.168.2.0/24>
>
> In documentation found that it is only supported for ikev2, for ikev1
> only first  subnet in comma separted is considered. In my setup it seems
> only the first one is working.
>
> In some of the internet posts found that it is working for ikev1 also.
> Is this true ?
>
> Thanks,
> Jayapal
>
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users
>

-- 
======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4275 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20151119/7b10f7df/attachment.bin>