Hello Stuart, this is no problem for strongSwan. With IKEv2 you just enumerate the networks in the remote traffic selector:
rightsubnet=<net1>,<net2>,...,<net11> so that only a single CHILD_SA must be established. With the old IKEv1 protocol, 11 connection definitions are needed which result in one ISAKMP_SA and 11 IPsec_SAs to be negotiated. Best regards Andreas On 08/09/2010 10:36 PM, Stuart Beckett wrote: > Hello, > > Can strongSwan support a connection where the remote (righthand) side > has multiple networks? > > For instance we have an application where we will need to access eleven > unique subnets on the remote side. > > Thanks > > Stuart Beckett > ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
