On 2008-06-30, Harald Dunkel <[EMAIL PROTECTED]> wrote: > Mitja Mu>enih wrote: >> >> It is not a problem within isakmpd, it will accept IPV4_ADDR_SUBNET of size >> /32. >> >> As I already explained to you in a private mail, ipsecctl will export both >> 192.168.1.249 and 192.168.1.249/32 into IPV4_ADDR=192.168.1.249 while your >> windows client is sending IPV4_ADDR_SUBNET for 192.168.1.249/32, and this >> will not match. >> > > Does NCP client violate some RFC by sending IPV4_ADDR_SUBNET for > 192.168.1.249/32 ?
Not that I could identify. In fact, for software implementing RFC4322, "Identities MUST be ID_IPV4_ADDR_SUBNET with the mask being /32."
