[Swan] IKEv2 multiple subnets CIDRs on single Child SA
gfrankliu at gmail.com
Tue Sep 15 18:40:07 UTC 2020
*Important:* When using IKEv2, your peer VPN gateway *must* accept all of
the CIDRs in each traffic selector using a single Child SA. Not all VPN
gateways support this. VPN gateways that create a unique Child SA per CIDR
are *not* compatible with Cloud VPN.
Does Libreswan support this? I tried Strongswan and that worked, but
couldn't get it to work with Libreswan.
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Swan