[strongSwan] mixing ipv4 and ipv6 subnets does not work

Tobias Brunner tobias at strongswan.org
Sat Mar 10 13:46:49 CET 2012


Hi Niccolò,

Thanks for the config.

> conn A-B
>          ...
>          leftsubnet=::/0
>          ...
>          rightsubnet=1.2.3.32/28,a:b:c:0300::/56

That's not gonna work, as you have only an IPv6 subnet configured in
leftsubnet.  Policies in the kernel are installed for the combination of
every subnet in leftsubnet with every subnet in rightsubnet (if the
responder does no narrowing), but only if the address families of two
subnets match.  Therefore, try adding 0.0.0.0/0 to leftsubnet.

Regards,
Tobias




More information about the Users mailing list