On Tue, 8 May 2018, Thomas Stein wrote:

yes it will get an IP from the remote server and assign it to the
loopback interface.

Thanks for your answer. Thats exactly my setup, yes

Why do you think this is a problem? :)

Well, i have no connectivity and i have to admit i'm a little bit lost now. Is 
there a documentation
somewhere how to configure the rest? I guess there is some iptables foo to do 
now?

You should see two "half routes" that cover the entire address space, eg:

0.0.0.0/1 via YourGW dev iface src IPyouGot
128.0.0.0/1 via YourGW dev iface src IPyouGot

If you did not configure for "all traffic via vpn" but only one subnet,
then you will see just that subnet routed using the src specification.

Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to