Re: [strongSwan] protecting l2tp and extraneous entries in SPD

2020-02-08 Thread Victor Sudakov
Is it also normal that the SA lifetimes always look so tremendous? Victor Sudakov wrote: > Dear Colleagues, > > I want to protect L2TP traffic (and *only* L2TP traffic with IPSec). > FreeBSD 12.1, Strongswan 5.8.2 > > c.c.c.c is the L2TP client and s.s.s.s is the L2TP server. > > ipsec.conf:

[strongSwan] protecting l2tp and extraneous entries in SPD

2020-02-08 Thread Victor Sudakov
Dear Colleagues, I want to protect L2TP traffic (and *only* L2TP traffic with IPSec). FreeBSD 12.1, Strongswan 5.8.2 c.c.c.c is the L2TP client and s.s.s.s is the L2TP server. ipsec.conf: conn netpoint left=c.c.c.c right=s.s.s.s rightprotoport=udp/l2tp leftprotoport=udp/%any