[strongSwan] multiple subnet in local_ts and remote_ts in swanctl.conf

Tobias Brunner tobias at strongswan.org
Thu May 11 07:57:42 CEST 2017


Hi Guylain,

> If in understand the documentation correctly it should be possible. Am I
> right?

That mainly depends on two things, the IKE version (it only works for
IKEv2, see [1]) and whether your peer has a matching configuration and
supports multiple traffic selectors per CHILD_SA - it might just narrow
the traffic selectors to the first one it received.

Regards,
Tobias

[1]
https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Multiple-subnets-per-SA



More information about the Users mailing list