Hi
In our scenario, I need to mark packets so that those marked packets to be
transmitted via one tunnel. But I do not want set rightsubnet or leftsubnet.
my config is:
conn net-net
left=30.0.2.2
leftcert=peer1.crt
#leftsubnet=0.0.0.0/0
#rightsubnet=50.0.2.0/24
rightsubnet=0.0.0.0/0
right=30.0.2.1
leftid="xxxxxxx"
rightid="xxxxxxxxxx"
type=tunnel
auth=ah
auto=start
ike=3des-sha1-md5-modp1024
esp=3des-md5-modp1024
dpddelay=10s
dpdaction=restart
mark=20
Unfortunately I could not up channel with this config without any error.Of
course I have set related iptables rules.
Thanks for any help or guidance
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
