In all cases work only last subnet from list. I had the same issue with a StrongSwan instance as the remote end.
This was the issue: https://www.mail-archive.com/[email protected]&q=subject:%22Re%5C%3A+%5C%5BSwan%5C%5D+Tunnels+coming+establishing+and+dropping+quickly%22&o=newest&f=1 From: Swan <[email protected]> On Behalf Of Eugeniy Khvastunov Sent: 27 September 2018 15:50 To: [email protected] Cc: [email protected] Subject: Re: [Swan] rightsubnets In all cases work only last subnet from list. P.S.: libreswan-3.23-5.el7_5.x86_64 On Thu, Sep 27, 2018 at 5:46 PM Nick Howitt <[email protected]<mailto:[email protected]>> wrote: AFAIK the first and second work. At a guess the third might. Try it and see if you connections instantiate as expected. On 27/09/2018 15:41, Eugeniy Khvastunov wrote: Hi all! What is right way to put in config more than one subnet? On some forums i find: rightsubnets={172.16.1.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=GbjwU28sPd7w7x1cMqVZTLYhbtRgqDd8c1cx7lrmkQM%3D&reserved=0> 192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=x%2B6O7nSUEImPrXIFIMJ0MdV0SXpyrmES3xKba1u3NQU%3D&reserved=0>} rightsubnets={172.16.1.0/24,192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=Rkppw5jIf7qAsG1C903XqSpeRLzP1Sf1rorARY7A4qc%3D&reserved=0>} rightsubnets={172.16.1.0/24,192.168.3.0/24,<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24%2C&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=HFopRlaSgYvtXh0b5iy7VUlIxyf4FrxKYkM3i6gG6oE%3D&reserved=0>} What variant right? -- wbr. Eugeniy Khvastunov, System administrator. [FMGH-UANIC] http://blog.unlimite.net<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblog.unlimite.net&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=0bB5UC4y6lZ3hCLB2nqHjSjRniLTezNpb5ZZoyyZAzw%3D&reserved=0> _______________________________________________ Swan mailing list [email protected]<mailto:[email protected]> https://lists.libreswan.org/mailman/listinfo/swan<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.libreswan.org%2Fmailman%2Flistinfo%2Fswan&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=2bQzk%2B1Dt6DPVB3UZcabSsWoYTRwXUIl9hPhrH1du14%3D&reserved=0> _______________________________________________ Swan mailing list [email protected]<mailto:[email protected]> https://lists.libreswan.org/mailman/listinfo/swan<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.libreswan.org%2Fmailman%2Flistinfo%2Fswan&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=2bQzk%2B1Dt6DPVB3UZcabSsWoYTRwXUIl9hPhrH1du14%3D&reserved=0> -- wbr. Eugeniy Khvastunov, System administrator. [FMGH-UANIC] http://blog.unlimite.net<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblog.unlimite.net&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=0bB5UC4y6lZ3hCLB2nqHjSjRniLTezNpb5ZZoyyZAzw%3D&reserved=0>
_______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
