[Swan] net-to-net for road warriors

Nick Howitt nick at howitts.co.uk
Sat Jan 26 16:38:39 UTC 2019

On 26/01/2019 16:22, Paul Wouters wrote:
> On Jan 26, 2019, at 03:54, Nick Howitt <nick at howitts.co.uk> wrote:
>>> all the tunnels seem to have come up, so likely this is now related to
>>> NAT or MASQUERADING rules. Or forwarding rules, or those nodes not
>>> having a gateway pointing to the VPN server for those remote subnets.
>> left/rightsourceip?
> No you cannot do that with subnetS=, only with singular subnet=
> It would be nice if we could extend that functionality to cover all combinatory cases with a multiple leftsourceip=, but we don’t currently.
Ugh. That points to multiple conns then, doesn't it? I wouldn't have 
thought the logic wouldn't be too difficult to implement (pick the 
source IP from the subnet you are instantiating ...) but it is more time 
and effort.
> Paul

More information about the Swan mailing list