Ok I see. Checkpoint gets the proposal rightsubnet=192.168.1.35/32,192.168.1.36/32
from strongSwan and narrows it down to rightsubnet=192.168.1.35/32 In this case the only alternative is to define two separate CHILD_SAs as described in my earlier posting. Regards Andreas On 07/10/2012 01:36 PM, Pedro José Bello Valiñas wrote: > Hi Andreas, > Yes, we are selecting IKEv2 protocol. > > On the remote endpoint (Checkpoint) the same configuration is set. > > Is it possible to be failing on interoperability? > > Regards, > Pedro. > > -----Mensaje original----- > De: Andreas Steffen [mailto:[email protected]] > Enviado el: martes, 10 de julio de 2012 8:17 > Para: [email protected] > CC: [email protected] > Asunto: Re: [strongSwan] Right hosts > > Hi Pedro, > > are you sure that you chose the IKEv2 protocol since IKEv1 does > not support this concatenation of subnets. > > Regards > > Andreas > > On 10.07.2012 08:29, Pedro José Bello Valiñas wrote: >> De: Pedro José Bello Valiñas [mailto:[email protected]] ====================================================================== Andreas Steffen [email protected] strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
