> By which way the priority of a policy can be specified into 'ipsec.conf' file?

There is currently no way of specifying priorities manually in
ipsec.conf. But smaller subnets are always installed with a higher
priority.

> [...] should be replaced by "rightsubnet=0.0.0.0/0"?

Yes, rightsubnet=0.0.0.0/0 includes all destination addresses.

Martin

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to