[Swan-dev] overlapping address pools
D. Hugh Redelmeier
hugh at mimosa.com
Tue Apr 22 03:55:10 EEST 2014
| From: Antony Antony <antony at phenome.org>
| Also I
| realized if I really want I can take a single address from an
| addresspool and configure it as /32 leftsubnet. The proposed partial
| overlap check will not prohibit that:)
True. But if you take a /32 that conflicts with a leased /32, there
will be a routing clash that probably causes obscure error messages.
We should probably object to conns that use addresses (subnets) that
cover addresses in a pool.
| Libreswan assigns from a user configured addresspool. So I think
| addresspool and subnet assignments are similar.
There is a time-honoured rule for overlapping but not identical
subnets. We have no rule for overlapping but not identical ranges;
| Any way, lets agree that a partial overlap between addresspools will be
| rejected. I will make the change.
More information about the Swan-dev