Hello Noel,

problem didn´t occur again when I tested over more than two hours. Should be fixed.

The problematic "vhost:%no,%priv" seems to stem from IPcop that IPFire was forked from. I could remove this by unchecking "Roadwarrior virtual IP (inner-IP)". I will also update the IPFire wiki as the current example is incorrect in some ways.

Thanks for your help!


Lars



On Tue, 21 Jul 2015 12:24:44 +0200, Noel Kuntze <[email protected]> wrote:


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello Larsen,

No. Remove rightsubnet and use rightsourceip instead.
Set the IP pool in rightsourceip.

Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 21.07.2015 um 12:23 schrieb Larsen:
Hello Noel,

ok, thanks. Will try that (removing "rightsourceip").


Lars



On Tue, 21 Jul 2015 12:22:08 +0200, Noel Kuntze <[email protected]> wrote:


Hello Larsen,

Sorry, I mean the rightsourceip option.


Mit freundlichen Grüßen/Kind Regards,
Noel Kuntze

GPG Key ID: 0x63EC6658
Fingerprint: 23CA BB60 2146 05E7 7278 6592 3839 298F 63EC 6658

Am 21.07.2015 um 12:21 schrieb Larsen:
>>> Hello Noel,
>>>
>>>> The virtual IPs for the clients are chosen from the rightsubnet option.
>>>
>>> But I should remove the rightsubnet option, shouldn´t I?
>>> How is this gonna work then?
>>>
>>>
>>>> What version of strongSwan are you using?
>>>
>>> strongSwan U5.3.2/K3.14.43-ipfire-pae
>>>
>>>
>>>
>>> Lars
>>> _______________________________________________
>>> Users mailing list
>>> [email protected]
>>> https://lists.strongswan.org/mailman/listinfo/users

_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=dFhH
-----END PGP SIGNATURE-----
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to