Thanks Martin! 
Just wondering if 5.0.1 is in the pipe to be released soon? Thanks!

Zhiheng

-----Original Message-----
From: Martin Willi [mailto:[email protected]] 
Sent: Thursday, August 23, 2012 11:37 PM
To: Mao, Zhiheng
Cc: [email protected]
Subject: Re: [strongSwan] How to setup only one VPN connection for a single 
road warrior with dual IP addresses (v4 and v6) using IKEv2 in strongswan-5.0.0?


> I am wondering if it is possible to setup only one connection for 
> Carol, but be able to route both IPv4 and IPv6 traffic through this 
> single tunnel?

Yes, with IKEv2 you can negotiate traffic selectors for both IPv4 and
IPv6 in a single CHILD_SA. To do so, for example set

  leftsubnet=10.0.0.1/32,fec1::/64
  rightsubnet=10.2.0.0/16,fec2::/64

Not supported is the assignment of multiple virtual IPs using 
left/rightsourceip. However, I'm currently working on it and I hope to get it 
done for 5.0.1.

Regards
Martin

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to