[strongSwan] Strongswan unable to install policy

Noel Kuntze noel at familie-kuntze.de
Fri Feb 26 21:21:38 CET 2016


> And in config I have subnet 192.168.200.172/17 but in
> status all strongswan shows 192.159.200.172/32 can this affect
> anything? 
Obviously charon only negotiates policies for the two hosts, which indicate
that you misconfigured the other side and traffic selector narrowing is happening.
I can not tell you why the child_sa gets reestablished every time, but I figure
it's because you use auto=route and you misconfigurd the subnet settings.

-- 

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160226/baa4b2cc/attachment-0001.pgp>


More information about the Users mailing list