[strongSwan] Problem with multiple ip address configured in left and right subnet in Ikev1

Noel Kuntze noel at familie-kuntze.de
Tue Mar 7 18:36:04 CET 2017


Come on, this is trivial. How did you not find this?

https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Multiple-subnets-per-SA

Am 7. März 2017 18:34:25 MEZ schrieb bhargav p <bhargav.1226 at gmail.com>:
>Hi,
>
>
>I am using strongswan version 5.5.1.
>
>In ipsec.conf, configured left and right subnets like below:
>
> leftsubnet=30.30.30.0/24,50.50.50.0/24
> rightsubnet=20.20.20.0/24,40.40.40.0/24
> keyexchange=ikev1
>auto=start
>
>I am trying to establish tunnel between two ubuntu boxes.
>
>Though strongswan is installed and compiled by enabling unity extension
>plugin, still only first subnet in configuration is used for
>establishing
>tunnel, and only those SPD entries are inserted in kernel.
>
>But for IKEv2, everything works fine, when multiple subnets are
>configured.
>
>So, for Ikev1, other than unity plugin, do I need to something more to
>get
>this worked? or For Ikev1,
>multiple subnets seperated by coma is not allowed?
>
>Thanks,
>Bhargav

-- 
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170307/048750d0/attachment.html>


More information about the Users mailing list