On Mon, 27 Aug 2018, Craig Marker wrote:

I recently experienced an issue where a SA was established even though the new 
NAT mapping (the NATD source IP) was a different IP address than what was 
configured
in my ipsec.conf file. Is this expected? Is there something I’m doing in my 
configuration files to allow this? Could this be a bug?

I don't think that is possible. Is the other IP a valid IP on your
machine? does it show up at the first bit of "ipsec status" ?

Paul
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to