Hello,

I'm not sure whether I'm doing something wrong or whether this is by
design...

I have a strongSwan 5.1.0 server with strongSwan Android clients. The
clients are unable to access LAN addresses when leftsubnet is set to
0.0.0.0/0, though they can access the Internet.

The server config is:

conn android
        left=%any
        leftsubnet=0.0.0.0/0
        #leftsubnet=192.168.0.0/24
        leftnexthop=192.168.0.254
        leftcert=server.pem
        right=%any
        rightsourceip=10.3.0.0/24
        rightca=%same
        rightauth=pubkey
        auto=add

So my LAN is 192.168.0.0/24, I'm NATting 10.3.0.0/24 to the server's
address.

If I set leftsubnet to 192.168.0.0/24 the clients can access LAN hosts
without issue, but when set to 0.0.0.0/0 they can access the Internet
but not anything in 192.168.0.0/24.

Any suggestions on what the issue could be or how to debug it would be
greatly appreciated!

David.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to