[strongSwan] how to setup transport mode with netmask on the right side

Noel Kuntze noel at familie-kuntze.de
Mon Feb 23 21:46:54 CET 2015


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Ko,

You cannot use transport mode with any hosts or IPs other than the ones of the endpoints.

Mit freundlichen Grüßen/Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 23.02.2015 um 21:29 schrieb Ko, HsuenJu:
>
> I am trying to find out how to setup right side with netmask using transport mode. Following is what I did.  But somehow  it end up switched to tunnel mode.  Can someone let me know what I did wrong here?
>
> 
>
> Thanks!
>
> 
>
> 
>
>      left=134.111.75.175
>
>      leftauth=psk
>
>      type=transport
>
>      right=134.111.75.0/24
>
>      rightauth=psk
>
>      esp=3des-md5
>
>      keyexchange=ikev2
>
>      auto=add
>
> 
>
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=qAo1
-----END PGP SIGNATURE-----



More information about the Users mailing list