[Swan] rightsubnets

[Madden, Joe]

In all cases work only last subnet from list.

I had the same issue with a StrongSwan instance as the remote end.

This was the issue:

https://www.mail-archive.com/search?l=swan@lists.libreswan.org&q=subject:%22Re%5C%3A+%5C%5BSwan%5C%5D+Tunnels+coming+establishing+and+dropping+quickly%22&o=newest&f=1



From: Swan <swan-bounces at lists.libreswan.org> On Behalf Of Eugeniy Khvastunov
Sent: 27 September 2018 15:50
To: nick at howitts.co.uk
Cc: swan at lists.libreswan.org
Subject: Re: [Swan] rightsubnets

In all cases work only last subnet from list.
P.S.: libreswan-3.23-5.el7_5.x86_64

On Thu, Sep 27, 2018 at 5:46 PM Nick Howitt <nick at howitts.co.uk<mailto:nick at howitts.co.uk>> wrote:
AFAIK the first and second work. At a guess the third might. Try it and see if you connections instantiate as expected.
On 27/09/2018 15:41, Eugeniy Khvastunov wrote:
Hi all!
What is right way to put in config more than one subnet?
On some forums i find:
rightsubnets={172.16.1.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=GbjwU28sPd7w7x1cMqVZTLYhbtRgqDd8c1cx7lrmkQM%3D&reserved=0> 192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=x%2B6O7nSUEImPrXIFIMJ0MdV0SXpyrmES3xKba1u3NQU%3D&reserved=0>}
rightsubnets={172.16.1.0/24,192.168.3.0/24<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=Rkppw5jIf7qAsG1C903XqSpeRLzP1Sf1rorARY7A4qc%3D&reserved=0>}
rightsubnets={172.16.1.0/24,192.168.3.0/24,<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2F172.16.1.0%2F24%2C192.168.3.0%2F24%2C&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=HFopRlaSgYvtXh0b5iy7VUlIxyf4FrxKYkM3i6gG6oE%3D&reserved=0>}
What variant right?
--
wbr. Eugeniy Khvastunov,
   System administrator.
       [FMGH-UANIC]
 http://blog.unlimite.net<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblog.unlimite.net&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=0bB5UC4y6lZ3hCLB2nqHjSjRniLTezNpb5ZZoyyZAzw%3D&reserved=0>


_______________________________________________

Swan mailing list

Swan at lists.libreswan.org<mailto:Swan at lists.libreswan.org>

https://lists.libreswan.org/mailman/listinfo/swan<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.libreswan.org%2Fmailman%2Flistinfo%2Fswan&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=2bQzk%2B1Dt6DPVB3UZcabSsWoYTRwXUIl9hPhrH1du14%3D&reserved=0>

_______________________________________________
Swan mailing list
Swan at lists.libreswan.org<mailto:Swan at lists.libreswan.org>
https://lists.libreswan.org/mailman/listinfo/swan<https://emea01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.libreswan.org%2Fmailman%2Flistinfo%2Fswan&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=2bQzk%2B1Dt6DPVB3UZcabSsWoYTRwXUIl9hPhrH1du14%3D&reserved=0>


--
wbr. Eugeniy Khvastunov,
   System administrator.
       [FMGH-UANIC]
 http://blog.unlimite.net<https://emea01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fblog.unlimite.net&data=01%7C01%7Cjoe.madden%40mottmac.com%7C65e03a34f6684a929a5808d624888a4d%7Ca2bed0c459574f73b0c2a811407590fb%7C0&sdata=0bB5UC4y6lZ3hCLB2nqHjSjRniLTezNpb5ZZoyyZAzw%3D&reserved=0>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20180927/532dee9d/attachment-0001.html>