[strongSwan] Strongswan Forecast and Broadcast from Lan to Vpn clilent, not relayed !

[CpServiceSPb .]

I have Strongswan 5.5 installed at Ubuntu 14.04 LTS x64, built from sources.
Also forecast plug-in is enabled, set up and working.
There are some Lan clients and Ikev2 Vpn clients connected from time to
time.


So, there are its settings:

some from ipsec.conf
mark=%unique at ikev2 connection
broadcast address 255.255.255.255 is added to leftsubnet, and there is no
rightsubnet at all

some from strongswan.conf
forecast {
            interface=lan
            reinject=ikev2_cert_,ikev1_xauth_cert
        }


Packets from Vpn clients with 255.255.255.255 as destination are relayed to
lan interface, but from lan interface are not to ikev2 tunnel.

How is to solve it ?
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160902/8830cb62/attachment.html>