[Swan] rightsubnets

[Madden, Joe]

I believe it should be like this:

It should be like this:

rightsubnets=172.16.1.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=fUe4dlIfdwohxNUVnEu9iKjr9vMjql730khGfVUXiYw%3D&reserved=0>,192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=zZF9%2FeGuSc1s3kRwTYpQVdbAEnUl0DkD4gCpjWPDTl4%3D&reserved=0>

Cheers.

Joe.


From: Swan <swan-bounces at lists.libreswan.org> On Behalf Of Satavee Junwana
Sent: 27 September 2018 15:59
To: J Kephart <jkephart at safetynetaccess.com>
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] rightsubnets

 I also have the same problem for ikev2.,
Libreswan initiate phase1 for each submet. But there has no problem wth ikve1 ... noted:libreswarn-3.26
Sent via Iphone

On 27 Sep 2018, at 21:47, J Kephart <jkephart at safetynetaccess.com<mailto:jkephart at safetynetaccess.com>> wrote:


What is right way to put in config r amore than one subnet?
On some forums i find:
rightsubnets={172.16.1.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=fUe4dlIfdwohxNUVnEu9iKjr9vMjql730khGfVUXiYw%3D&reserved=0> 192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=zZF9%2FeGuSc1s3kRwTYpQVdbAEnUl0DkD4gCpjWPDTl4%3D&reserved=0>}
rightsubnets={172.16.1.0/24,192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=goPl%2B6qs1e7TIB0iRjtO9qU80WYQh%2FxenbNQTKMdYV4%3D&reserved=0>}
rightsubnets={172.16.1.0/24,192.168.3.0/24,<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24%2C&data=01%7C01%7Cjoe.madden%40mottmac.com%7C09972c5374bc48cd3b4608d62489d0dc%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=8bGTKZKrrQPPMHtnQd4CiQvLFLrrz8Y%2BSyP4D2NcdK4%3D&reserved=0>}
What variant right?


Eugeniy, use the comma-separated format.  That's the one that worked for us.

-- Jim
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20180927/9ee25107/attachment-0001.html>