[strongSwan] Help needed with shunted connections - not working as expected
noel at familie-kuntze.de
Tue Feb 16 18:53:11 CET 2016
On 16.02.2016 13:43, Mahendra SP wrote:
> conn allow-9100
"allow" is not a valid setting for "type".
> conn drop-rest
What's the purpose of that? It just tells XFRM to not do any processing on
packets that match those left- and rightsubnet settings.
When I look at all your settings, they seem to contradict each other.
Please do a minimal setup. I think the error is in your overlaping subnets
with all those different types.
Mit freundlichen Grüßen/Kind Regards,
GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 819 bytes
Desc: OpenPGP digital signature
More information about the Users