<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">Yes you are right <br><br><div id="AppleMailSignature" dir="ltr">Sent from my iPhone</div><div dir="ltr"><br>On Feb 14, 2020, at 11:38, John Crisp <<a href="mailto:jcrisp@safeandsoundit.co.uk">jcrisp@safeandsoundit.co.uk</a>> wrote:<br><br></div><blockquote type="cite"><div dir="ltr">
<meta http-equiv="content-type" content="text/html; charset=utf-8">
<p><font size="+1">I realised I may have been under a
misapprehension here....</font></p>
<p><font size="+1">Messing about with L2TP & Ipsec again</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">So if I follow the documentation and have this as
basic:</font></p>
<p><font size="+1">virtual-private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">The ipsec server sits on a 192.168.100.0 network
and issues DHCP itself in the range</font></p>
<p><font size="+1">192.168.100.0 - 192.168.100.100</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">The L2TPD dial in server gives out a few IP
addresses in the range:</font></p>
<p><font size="+1">192.168.100.176/28</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">It has this in the ipsec connection setting:</font></p>
<p><font size="+1">rightsubnet=vhost:%priv</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">I *think* that the virtual-private line should be
like this:<br>
<br>
virtual-private=%v4:10.0.0.0/8,%v4:192.168.0.0/16,%v4:172.16.0.0/12,
%v4:!192.168.100.176/28</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">Can someone confirm that this is correct, or am I
missing something?</font></p>
<p><font size="+1"><br>
</font></p>
<p><font size="+1">B. Rgds</font></p>
<p><font size="+1">John<br>
</font></p>
</div></blockquote><blockquote type="cite"><div dir="ltr"><span>_______________________________________________</span><br><span>Swan mailing list</span><br><span><a href="mailto:Swan@lists.libreswan.org">Swan@lists.libreswan.org</a></span><br><span><a href="https://lists.libreswan.org/mailman/listinfo/swan">https://lists.libreswan.org/mailman/listinfo/swan</a></span><br></div></blockquote></body></html>