Hi Martin, patch [1] works perfectly as the updated scenario shows:
http://www.strongswan.org/uml/20120620-1053/ipv6/rw-ip6-in-ip4-ikev2/ On gateway moon: Jun 20 10:53:32 moon charon: 06[ENC] parsed IKE_AUTH request 1 [ IDi CERT .. CP(ADDR6) .. ] .. 06[IKE] peer requested virtual IP %any6 06[CFG] assigning new lease to '[email protected]' 06[IKE] assigning virtual IP fec3::1 to peer '[email protected]' 06[IKE] CHILD_SA rw{1} established with SPIs c42d424d_i c8635e57_o and TS fec1::/16 === fec3::1/128 Thanks Andreas On 06/20/2012 10:05 AM, Martin Willi wrote: > Hi, > >> 01[IKE] traffic selectors fec1::/16 === 0.0.0.0/0 inacceptable > > Currently the virtual IP address family is determined on the (local) > leftsubnet option. Defining > > leftsubnet=::/0 > > on the client should fix this scenario. > > To have a better fallback if no leftsubnet is given, I've pushed a patch > [1] that looks at the family of rightsubnet if no leftsubnet is given. > > Regards > Martin > > [1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=e2dd114f ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
