Why are you mismatching the ranges and masks?? You must use the same configuration of network ranges for both sides to agree.
Paul Sent from my iPhone > On Mar 6, 2017, at 19:59, Xinwei Hong <[email protected]> wrote: > > Hi, > > With pluto/netkey, if one one side I have: > leftsubnets='10.100.0.0/16' > rightsubnets='10.200.0.0/24' > > on the other side: > leftsubnets='10.200.0.0/16' > rightsubnets='10.100.0.0/24' > > step 2 negotiation won't work probably because they are not exact match. Is > this expected or I'm missing something. Can it do a subset matching? > > Previously when I use racoon+netkey, things were OK and tunnel can be created. > > > Thanks, > Xinwei > _______________________________________________ > Swan mailing list > [email protected] > https://lists.libreswan.org/mailman/listinfo/swan
_______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
