<div dir="ltr"><div><div>( Sorry Bad my english )<br><br></div>Its correct ? :<br></div>( remote side )<br><div>---<br>conn mytunnel<br> leftid=@<a href="http://off1.net.prn.int">off1.net.prn.int</a><br> left=192.168.121.17<br> leftsourceip=192.168.129.254<br> leftsubnets={<a href="http://192.168.129.0/24">192.168.129.0/24</a> <a href="http://192.168.128.0/24">192.168.128.0/24</a>} # <--- ? (subnets)<br> leftrsasigkey=0sAQ1xad9N...<br> #<br> rightid=@<a href="http://main.prn.int">main.prn.int</a><br> right=192.168.121.1<br> rightsourceip=192.168.1.60<br> rightsubnet=<a href="http://0.0.0.0/0">0.0.0.0/0</a> <br> rightrsasigkey=0sAQMCfFm....<br> #<br> authby=rsasig<br> auto=start<br><br>conn 129-exclude<br> left=0.0.0.0 # <---- ? (left)<br> leftsubnet=<a href="http://192.168.129.0/24">192.168.129.0/24</a><br> right=192.168.129.254<br> rightsubnet=<a href="http://192.168.129.0/24">192.168.129.0/24</a><br> authby=never<br> type=passthrough<br> auto=route<br><br>conn 128-exclude<br> left=192.168.128.250<br> leftsubnet=<a href="http://192.168.128.0/24">192.168.128.0/24</a><br> right=0.0.0.0 # <----- ? (right)<br> rightsubnet=<a href="http://192.168.128.0/24">192.168.128.0/24</a><br> authby=never<br> type=passthrough<br> auto=route<br clear="all"><div><div>---<br><br></div><div>No really works in CentOS 6.8 + updates.<br></div><div>I see : <a href="https://libreswan.org/wiki/Subnet_extrusion">https://libreswan.org/wiki/Subnet_extrusion</a><br>...<br><pre>conn branch1 # <--- ? ( branch1 )
left=1.2.3.4
leftid=@headoffice
leftsubnet=<a href="http://0.0.0.0/0">0.0.0.0/0</a>
leftrsasigkey=0sA[...]
#
right=10.11.12.13
rightid=@branch2 # <---- ? ( branch2 )
righsubnet=<a href="http://10.0.1.0/24">10.0.1.0/24</a>
rightrsasigkey=0sAYYYY[...]
#
auto=start
authby=rsasigkey
conn passthrough
left=1.2.3.4 # <--- ? ( from headoffice)
right=0.0.0.0
leftsubnet=<a href="http://10.0.1.0/24">10.0.1.0/24</a> # <--- ? ( from brach2 )
rightsubnet=<a href="http://10.0.1.0/24">10.0.1.0/24</a>
authby=never
type=passthrough
auto=route<br>...<br></pre></div><div>strange :(<br></div><div><br></div><div>Thanks.<br></div><div>-- <br><div class="gmail_signature">mx</div>
</div></div></div></div>