Hi Joe, Currently I have Libreswan-3.21rc5/CenOS6.9, it working fine either ikev1 or ikev2 –
But I’m planed and testing for updating to CentOS7.X/Libreswan-3.26, as mentioned on previous email I;’ve configuration that working fine with IKEv1, just only change to IKEv2 … Libreswan keep initial phase 1 for both/all subnet and “YES” as you said its only work latest subnet that we “ipssec auto –up ….” Sent from Mail for Windows 10 From: Madden, Joe Sent: Thursday, September 27, 2018 22:31 To: Eugeniy Khvastunov; [email protected] Cc: [email protected] Subject: Re: [Swan] rightsubnets In all cases work only last subnet from list. I had the same issue with a StrongSwan instance as the remote end. This was the issue: https://www.mail-archive.com/[email protected]&q=subject:%22Re%5C%3A+%5C%5BSwan%5C%5D+Tunnels+coming+establishing+and+dropping+quickly%22&o=newest&f=1 From: Swan <[email protected]> On Behalf Of Eugeniy Khvastunov Sent: 27 September 2018 15:50 To: [email protected] Cc: [email protected] Subject: Re: [Swan] rightsubnets In all cases work only last subnet from list. P.S.: libreswan-3.23-5.el7_5.x86_64 On Thu, Sep 27, 2018 at 5:46 PM Nick Howitt <[email protected]> wrote: AFAIK the first and second work. At a guess the third might. Try it and see if you connections instantiate as expected. On 27/09/2018 15:41, Eugeniy Khvastunov wrote: Hi all! What is right way to put in config more than one subnet? On some forums i find: rightsubnets={172.16.1.0/24 192.168.3.0/24} rightsubnets={172.16.1.0/24,192.168.3.0/24} rightsubnets={172.16.1.0/24,192.168.3.0/24,} What variant right? -- wbr. Eugeniy Khvastunov, System administrator. [FMGH-UANIC] http://blog.unlimite.net _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan _______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan -- wbr. Eugeniy Khvastunov, System administrator. [FMGH-UANIC] http://blog.unlimite.net
_______________________________________________ Swan mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan
