Hello!
I will create a VPN based on Strongswan. The IP-Range of the VPN is
172.16.0.0/22.
No I have separate this big IP-Range in smaller range with the netmask
/29 like that;
172.16.0.0/29 Central VPN Gateway 172.16.0.8/29
||
172.16.0.16
Please refer to Andreas' mail which you can find on
https://lists.strongswan.org/pipermail/users/2007-June/001874.html
This e-mail describes a very similar problem. You probably have to add
something like the following to your ipsec.conf:
conn pass
leftsubnet=172.16.0.16/29
ri
!
regards
Andreas Ascheneller
-Ursprüngliche Nachricht-
Von: Daniel Mentz [mailto:danielml+mailinglists.strongs...@sent.com]
Gesendet: Samstag, 4. Juli 2009 03:28
An: Andreas Ascheneller
Cc: users@lists.strongswan.org
Betreff: Re: [strongSwan] Ipsec routing / policy when leftside is part of
Andreas Ascheneller wrote:
> So now it works ;-)
Great!
> I have done the following steps;
>
> 1.) I have add your "conn" to my ipsec.conf.
> conn pass
> leftsubnet=172.16.0.16/29
> rightsubnet=172.16.0.16/29
> left=%defaultroute
> right=a.b.c.d
> type=passthroug
An: users@lists.strongswan.org
Cc: Andreas Ascheneller
Betreff: Re: [strongSwan] Ipsec routing / policy when leftside is part of
rideside network
Andreas Ascheneller wrote:
> So now it works ;-)
Great!
> I have done the following steps;
>
> 1.) I have add your "conn" t