[strongSwan] Strongswan as a VPN Hub with a single network adapter

Tobias Brunner tobias at strongswan.org
Fri Aug 30 14:21:37 CEST 2013

Hi Kevin,

> The routing on the spoke is configured that any communication
> to the following subnets
> will be routed to the Strongswan VPN gateway public IP (I've yet to
> setup the tunnels for, and

How did you configure the spokes?  Did you specify all those subnets in
righsubnet?  Or did you use rightsubnet= so that the gateway
can narrow the subnets to whatever it has configured as leftsubnet?

Configuring the subnets as leftsubnet on the gateway is correct, even if
it doesn't have an IP address in any of them installed.  As seen, the
daemon will complain that it can't find a local address that is
contained in the traffic selector, but that only means that it will not
install a source route, which is fine for the subnets it is not directly
attached to.


More information about the Users mailing list