[strongSwan] mixing ipv4 and ipv6 subnets does not work

Tobias Brunner tobias at strongswan.org
Sat Mar 10 13:46:49 CET 2012

Hi Niccolò,

Thanks for the config.

> conn A-B
>          ...
>          leftsubnet=::/0
>          ...
>          rightsubnet=,a:b:c:0300::/56

That's not gonna work, as you have only an IPv6 subnet configured in
leftsubnet.  Policies in the kernel are installed for the combination of
every subnet in leftsubnet with every subnet in rightsubnet (if the
responder does no narrowing), but only if the address families of two
subnets match.  Therefore, try adding to leftsubnet.


More information about the Users mailing list