[strongSwan] Fwd: Multiple right subnets with ikev1

Andreas Steffen andreas.steffen at strongswan.org
Thu Nov 19 20:22:49 CET 2015

Hi Jayapal,

according to the IKE standards, multiple comma separated subnets work
for IKEv2 only. With IKEv1 you have to define multiple connections
resulting in multiple QUICK_MODEs.



On 19.11.2015 11:31, Jayapal Reddy wrote:
> Hi,
> For site to site vpn configuration comma separated multiple subnets for
> rightsubnet, Is it working ?
> Ex: rightsubnet=,
> <,>
> In documentation found that it is only supported for ikev2, for ikev1
> only first  subnet in comma separted is considered. In my setup it seems
> only the first one is working.
> In some of the internet posts found that it is working for ikev1 also.
> Is this true ?
> Thanks,
> Jayapal
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4275 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20151119/7b10f7df/attachment.bin>

More information about the Users mailing list