[strongSwan] Setup site-to-site VPN via central server

Martin Sand dborn at gmx.net
Tue Jul 19 22:07:52 CEST 2016


> The diagrams show four hosts as I though that illustrates the
> difference between the two approaches a bit better

Maybe I am not the best reference since I started with strongSwan only 2
weeks ago, but it is quite hard to understand why there is only A-C
mentioned although the diagram shows A-D.

> Or just set leftsubnet=192.168.2.0/24,192.168.3.0/24 on the server
Oh thanks, makes perfect sense. Is there any negation available, e.g.
leftsubnet=192.168.0.0/16,!192.168.1.0/24

Best regards
Martin


More information about the Users mailing list