Come on, this is trivial. How did you not find this?
https://wiki.strongswan.org/projects/strongswan/wiki/FAQ#Multiple-subnets-per-SA
Am 7. März 2017 18:34:25 MEZ schrieb bhargav p <[email protected]>:
>Hi,
>
>
>I am using strongswan version 5.5.1.
>
>In ipsec.conf, configured left and right subnets like below:
>
> leftsubnet=30.30.30.0/24,50.50.50.0/24
> rightsubnet=20.20.20.0/24,40.40.40.0/24
> keyexchange=ikev1
>auto=start
>
>I am trying to establish tunnel between two ubuntu boxes.
>
>Though strongswan is installed and compiled by enabling unity extension
>plugin, still only first subnet in configuration is used for
>establishing
>tunnel, and only those SPD entries are inserted in kernel.
>
>But for IKEv2, everything works fine, when multiple subnets are
>configured.
>
>So, for Ikev1, other than unity plugin, do I need to something more to
>get
>this worked? or For Ikev1,
>multiple subnets seperated by coma is not allowed?
>
>Thanks,
>Bhargav
--
Diese Nachricht wurde von meinem Android-Mobiltelefon mit K-9 Mail gesendet.
_______________________________________________
Users mailing list
[email protected]
https://lists.strongswan.org/mailman/listinfo/users
