-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Way back in 2014 when I was last playing with XAUTH, I inquired into
the state of split tunneling/multinets, and the response was:
> Support for multiple networks on the server side without using
> 0.0.0.0/0 is close to being supported but needs a little work
> still.
What's the state of the art on this front today? My testing with
Shrew Soft VPN client indicates that "leftsubnets= { ... }" directive
doesn't do what I'd hoped, but is there another way?
I *have* come up with a workaround, wherein I set leftsubnet=0.0.0.0/0
and then manually set the topology in the Policy tab of the client,
but it would be nicer to be able to have the topology pushed to the
client during the modecfg transfer.
- ----
Nels Lindquist
<[email protected]>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
iEYEARECAAYFAljDF0QACgkQh6z5POoOLgTY4QCeOyghxACNCNoD8MVmlnzxKP9v
LZkAn0e4b4+9gB3e7mKKHC/kg6jNAGEm
=evGV
-----END PGP SIGNATURE-----
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan
