Hello,
I'm not sure whether I'm doing something wrong or whether this is by
design...
I have a strongSwan 5.1.0 server with strongSwan Android clients. The
clients are unable to access LAN addresses when leftsubnet is set to
0.0.0.0/0, though they can access the Internet.
The server config is:
conn android
left=%any
leftsubnet=0.0.0.0/0
#leftsubnet=192.168.0.0/24
leftnexthop=192.168.0.254
leftcert=server.pem
right=%any
rightsourceip=10.3.0.0/24
rightca=%same
rightauth=pubkey
auto=add
So my LAN is 192.168.0.0/24, I'm NATting 10.3.0.0/24 to the server's
address.
If I set leftsubnet to 192.168.0.0/24 the clients can access LAN hosts
without issue, but when set to 0.0.0.0/0 they can access the Internet
but not anything in 192.168.0.0/24.
Any suggestions on what the issue could be or how to debug it would be
greatly appreciated!
David.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users