I believe it should be like this: It should be like this:
rightsubnets=172.16.1.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=fUe4dlIfdwohxNUVnEu9iKjr9vMjql730khGfVUXiYw%3D&reserved=0>,192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=zZF9%2FeGuSc1s3kRwTYpQVdbAEnUl0DkD4gCpjWPDTl4%3D&reserved=0> Cheers. Joe. From: Swan <[email protected]> On Behalf Of Satavee Junwana Sent: 27 September 2018 15:59 To: J Kephart <[email protected]> Cc: [email protected] Subject: Re: [Swan] rightsubnets I also have the same problem for ikev2., Libreswan initiate phase1 for each submet. But there has no problem wth ikve1 ... noted:libreswarn-3.26 Sent via Iphone On 27 Sep 2018, at 21:47, J Kephart <[email protected]<mailto:[email protected]>> wrote: What is right way to put in config r amore than one subnet? On some forums i find: rightsubnets={172.16.1.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=fUe4dlIfdwohxNUVnEu9iKjr9vMjql730khGfVUXiYw%3D&reserved=0> 192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=zZF9%2FeGuSc1s3kRwTYpQVdbAEnUl0DkD4gCpjWPDTl4%3D&reserved=0>} rightsubnets={172.16.1.0/24,192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=goPl%2B6qs1e7TIB0iRjtO9qU80WYQh%2FxenbNQTKMdYV4%3D&reserved=0>} rightsubnets={172.16.1.0/24,192.168.3.0/24,<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24%2C&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=8bGTKZKrrQPPMHtnQd4CiQvLFLrrz8Y%2BSyP4D2NcdK4%3D&reserved=0>} What variant right? Eugeniy, use the comma-separated format. That's the one that worked for us. -- Jim
_______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
