[strongSwan] strongSwan 5 IKEv1 tunnel (iOS or StrongSwan client)
martin at strongswan.org
Wed Jul 25 13:12:01 CEST 2012
> conn ios
> conn us-east-1-vpc
You didn't specify a leftsubnet on the client (which is good). This
implies that the leftsubnet will be the address assigned using Mode
Config. This address will be allocated from the pool 10.100.255.0/28.
The Quick Mode that follows now uses the Mode Config address as "client
subnet", but your responder expects rightsubnet=10.0.0.0/24. Hence your
connection won't match.
If you remove the rightsubnet definition from your responder
configuration, the responder will use the allocated address, too, and
your tunnel should come up.
More information about the Users