[strongSwan] multiple subnet in local_ts and remote_ts in swanctl.conf

Guylain Lavoie guylainlavoie at gmail.com
Thu May 11 17:40:38 CEST 2017


Hi Tobias,

Yes you are right. I was using version1. As soon as I switched to version 2
is began to work correctly.
Tested multiple subnet for both local_ts and remote_ts. Works as expected.

Thanks,
Guylain


On Thu, May 11, 2017 at 1:57 AM, Tobias Brunner <tobias at strongswan.org>
wrote:

> Hi Guylain,
>
> > If in understand the documentation correctly it should be possible. Am I
> > right?
>
> That mainly depends on two things, the IKE version (it only works for
> IKEv2, see [1]) and whether your peer has a matching configuration and
> supports multiple traffic selectors per CHILD_SA - it might just narrow
> the traffic selectors to the first one it received.
>
> Regards,
> Tobias
>
> [1]
> https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#
> Multiple-subnets-per-SA
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170511/84e9e394/attachment.html>


More information about the Users mailing list