[strongSwan] how to map leftsubnet/rightsubnet to local_ts/remote_ts

[Jayalakshmi bhat]

Hi All,

We want to protect certain port range via IPsec. This is working fine when
we configure rule as below via ipsec.conf

conn host-host
leftsubnet=192.168.1.6[tcp/15-25]
rightsubnet=192.168.1.7[tcp]


Now we want to do the same via swanctl.conf. We tried using
local_ts/remote_ts. But did not help.

Please can any one let us know how to do this?

Regards
Jayalakshmi
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160226/07000a63/attachment.html>