[strongSwan] ipsec.conf left=%any

Peter Hsiang phsiang at nvidia.com
Fri Jun 6 00:02:59 CEST 2014


In ipsec.conf on the client side, instead of using the client's own IP address for "left",
if I change it to "left=%any", then the "ipsec up home" appears to still connect correctly and
reaches the "connection 'home' estabished successfully" message.

There was however a "resolving 'any' failed: No address associated with hostname" message.
Is this ok, or must the client always specify its own ip address in the 'left=' line?

The intent behind this question is that if the client's address is not static IP, then it's
nicer for the script to be able to use any address for 'left.'


This email message is for the sole use of the intended recipient(s) and may contain
confidential information.  Any unauthorized review, use, disclosure or distribution
is prohibited.  If you are not the intended recipient, please contact the sender by
reply email and destroy all copies of the original message.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20140605/5d8d6003/attachment.html>

More information about the Users mailing list