[Swan] left/rightsubnets option

Erik Andersson erik at ingate.com
Mon Apr 23 10:59:53 UTC 2018


Hi!

I'm running libreswan 3.23 and trying to connect road warriors via XAUTH 
and modecfg.

It works fine when the clients are able to connect to a single subnet:

conn remote
	...
	...
         right=10.48.28.81
         rightid=10.48.28.81
	rightsubnet=192.168.110.0/24
         left=%any
	...
	...

Trying to add a second subnet via the rightsubnets option:

conn remote
	...
	...
         right=10.48.28.81
         rightid=10.48.28.81
	rightsubnets=192.168.110.0/24,50.50.50.0/24
         left=%any
	...
	...

(have also tried rightsubnets={192.168.110.0/24 50.50.50.0/24})

Yields the following error in the pluto.log file:

Apr 23 12:42:48.546899: address family inconsistency in this/that connection
Apr 23 12:42:48.546970: Failed to load connection "remote/1x1": attempt 
to load incomplete connection

Not sure what I'm doing wrong. Is it possible to use the 
left/rightsubnets option (multiple subnets) option when working with 
modecfg?

Also, is the left/rightsubnets option available via whack?

Thanks in advance,

/Erik


More information about the Swan mailing list