[strongSwan] ipsec.conf left=%any

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Peter,

%any is the default value for left and you don't need to set it to that, if you didn't set it in conn %default.
The error message is misleading.
What you're doing is perfectly fine.

Regards,
Noel Kuntze

GPG Key id: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
Am 06.06.2014 00:02, schrieb Peter Hsiang:
>
> Hello,
>
> 
>
> In ipsec.conf on the client side, instead of using the client's own IP address for "left",
> if I change it to "left=%any", then the "ipsec up home" appears to still connect correctly and
> reaches the "connection 'home' estabished successfully" message.
>
> 
>
> There was however a "resolving 'any' failed: No address associated with hostname" message.
>
> Is this ok, or must the client always specify its own ip address in the 'left=' line?
>
> 
>
> The intent behind this question is that if the client's address is not static IP, then it's
> nicer for the script to be able to use any address for 'left.'
>
> 
>
> Thanks,
>
> Peter
>
> 
>
> -------------------------
> This email message is for the sole use of the intended recipient(s) and may contain confidential information.  Any unauthorized review, use, disclosure or distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
> -------------------------
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=Rdzv
-----END PGP SIGNATURE-----