[strongSwan] ipsec.conf left=%any

[Peter Hsiang]

Hi Noel,

Confirming that by removing the 'left=%any' line, the error message is gone now.  Thanks!

Regards,
Peter

-----Original Message-----
From: users-bounces at lists.strongswan.org [mailto:users-bounces at lists.strongswan.org] On Behalf Of Noel Kuntze
Sent: Thursday, June 05, 2014 3:07 PM
To: users at lists.strongswan.org
Subject: Re: [strongSwan] ipsec.conf left=%any



* PGP Signed by an unknown key

Hello Peter,

%any is the default value for left and you don't need to set it to that, if you didn't set it in conn %default.
The error message is misleading.
What you're doing is perfectly fine.

Regards,
Noel Kuntze

GPG Key id: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658 Am 06.06.2014 00:02, schrieb Peter Hsiang:
>
> Hello,
>
> 
>
> In ipsec.conf on the client side, instead of using the client's own IP 
> address for "left", if I change it to "left=%any", then the "ipsec up 
> home" appears to still connect correctly and reaches the "connection 'home' estabished successfully" message.
>
> 
>
> There was however a "resolving 'any' failed: No address associated with hostname" message.
>
> Is this ok, or must the client always specify its own ip address in the 'left=' line?
>
> 
>
> The intent behind this question is that if the client's address is not 
> static IP, then it's nicer for the script to be able to use any address for 'left.'
>
> 
>
> Thanks,
>
> Peter
>
> 
>
> -------------------------
> This email message is for the sole use of the intended recipient(s) and may contain confidential information.  Any unauthorized review, use, disclosure or distribution is prohibited.  If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.
> -------------------------
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

* Unknown Key
* 0x63EC6658(L)

_______________________________________________
Users mailing list
Users at lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users