Hi all,

What is the different between rightsubnet=%dynamic to omit the rightsubnet?

I have the same strongswan version on both client and server:
Linux strongSwan U5.1.2/K3.13.0-40-generic

I read that it's supposed to be the same behaviour:
/Instead of specifying a subnet, /%dynamic/ can be used to replace it with the IKE address, having the same effect
as omitting /left|rightsubnet/ completely/

But for some reason when I omit the "rightsubnet" from the client, child is created and connection is created.
When rightsubnet=%dynamic it's not working with the error:
/15[IKE] received INTERNAL_ADDRESS_FAILURE notify, no CHILD_SA built//
//15[IKE] failed to establish CHILD_SA, keeping IKE_SA/


Thanks
Guy

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users

Reply via email to