I have read the wiki about swanctl.conf, but have not found a good solution. e.g. I have a subnet 172.22.0.0/16, and a special ip 172.22.22.22 who does not want to run into ipsec tunnel. Does StrongSwan support '-'? like this: local_ts = 172.22.0.1-172.22.22.21,172.22.22.23-172.22.255.255 Is there any easy way?
Thx~