[Swan] rightsubnets

Satavee Junwana satavee at gmail.com
Thu Sep 27 15:21:02 UTC 2018


Hi Joe, 
Libreswan3-2.1/Ikev2/Centos 7.5 , it will say – syntax error 

 
Sent from Mail for Windows 10

From: Madden, Joe
Sent: Thursday, September 27, 2018 22:15
To: Satavee Junwana; J Kephart
Cc: swan at lists.libreswan.org
Subject: RE: [Swan] rightsubnets

I believe it should be like this:

It should be like this:

rightsubnets=172.16.1.0/24,192.168.3.0/24

Cheers.

Joe.


From: Swan <swan-bounces at lists.libreswan.org> On Behalf Of Satavee Junwana
Sent: 27 September 2018 15:59
To: J Kephart <jkephart at safetynetaccess.com>
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] rightsubnets

 I also have the same problem for ikev2., 
Libreswan initiate phase1 for each submet. But there has no problem wth ikve1 ... noted:libreswarn-3.26
Sent via Iphone

On 27 Sep 2018, at 21:47, J Kephart <jkephart at safetynetaccess.com> wrote:

What is right way to put in config r amore than one subnet?
On some forums i find:
rightsubnets={172.16.1.0/24 192.168.3.0/24}
rightsubnets={172.16.1.0/24,192.168.3.0/24}
rightsubnets={172.16.1.0/24,192.168.3.0/24,}
What variant right?


Eugeniy, use the comma-separated format.  That's the one that worked for us.

-- Jim

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20180927/0269e455/attachment.html>


More information about the Swan mailing list