[strongSwan] Problem with multiple ip address configured in left and right subnet in Ikev1

[bhargav p]

Hi,


I am using strongswan version 5.5.1.

In ipsec.conf, configured left and right subnets like below:

 leftsubnet=30.30.30.0/24,50.50.50.0/24
 rightsubnet=20.20.20.0/24,40.40.40.0/24
 keyexchange=ikev1
auto=start

I am trying to establish tunnel between two ubuntu boxes.

Though strongswan is installed and compiled by enabling unity extension
plugin, still only first subnet in configuration is used for establishing
tunnel, and only those SPD entries are inserted in kernel.

But for IKEv2, everything works fine, when multiple subnets are configured.

So, for Ikev1, other than unity plugin, do I need to something more to get
this worked? or For Ikev1,
multiple subnets seperated by coma is not allowed?

Thanks,
Bhargav
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170307/94907d02/attachment.html>