[strongSwan] mixing ipv4 and ipv6 subnets does not work
Tobias Brunner
tobias at strongswan.org
Sat Mar 10 13:46:49 CET 2012
Hi Niccolò,
Thanks for the config.
> conn A-B
> ...
> leftsubnet=::/0
> ...
> rightsubnet=1.2.3.32/28,a:b:c:0300::/56
That's not gonna work, as you have only an IPv6 subnet configured in
leftsubnet. Policies in the kernel are installed for the combination of
every subnet in leftsubnet with every subnet in rightsubnet (if the
responder does no narrowing), but only if the address families of two
subnets match. Therefore, try adding 0.0.0.0/0 to leftsubnet.
Regards,
Tobias
More information about the Users
mailing list