On Mon, 27 Oct 2014, Jérémie Vandeville wrote:
Hi everyone, Strongswan allow a very simple and elegant syntax for
right/left subnet
leftsubnet=10.0.0.0/24[icmp],10.0.0.0/24[tcp/8000]
rightsubnet=10.0.1.0/24[icmp],10.0.1.0/24[tcp/%any]
Is it possible to do the same configuration with libreswan ?
No. You will need to make two conns using:
conn one
also=base
leftsubnet=10.0.0.0/24
rightsubnet=10.0.1.0/24
leftprotoport=icmp
rightprotoport=icmp
conn two
also=base
leftsubnet=10.0.0.0/24
rightsubnet=10.0.1.0/24
leftprotoport=tcp/8000
rightprotoport=tcp/%any
conn base
left=....
right=...
etc.
Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan