On Tue, 12 Jun 2018, Reuben Farrelly wrote:

Paul wrote:

 I assume you have right=%any ?

 Can you try right=::

 I think there might be an issue with not havin a proper %any6

Indeed. It looks a lot better now, I can see the connection is being matched.

Ok, good.

Is there any way to support both families concurrently (a type of autodetect)

Not yet. You will have to define a v4 and a v6 conn.

But back to this connection, it's now progressing a lot further - but not quite completing still and data is still not flowing:

The below only shows liveness. So that assumes the connection
established? So can you show "ip xfrm pol" and "ip xfrm state" and
"ipsec status |grep router-2.reub.net"

Paul
_______________________________________________
Swan-dev mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan-dev

Reply via email to