diff options
| author | Martin Willi <martin@strongswan.org> | 2008-04-25 12:41:37 +0000 |
|---|---|---|
| committer | Martin Willi <martin@strongswan.org> | 2008-04-25 12:41:37 +0000 |
| commit | 3444390241db7d0c598e026ba598f4263b3620ef (patch) | |
| tree | 281972313638f85a74db44a36c77ed5efc053193 /src/starter/ipsec.conf.5 | |
| parent | 1aedf08183a70a4259b74f0b074da6bda483c513 (diff) | |
| download | strongswan-3444390241db7d0c598e026ba598f4263b3620ef.tar.bz2 strongswan-3444390241db7d0c598e026ba598f4263b3620ef.tar.xz | |
supporting multiple comma seperated subnets in left/rightsubnet definition
e.g. leftsubnet=10.2.0.0/16,10.4.0.0/16
Diffstat (limited to 'src/starter/ipsec.conf.5')
| -rw-r--r-- | src/starter/ipsec.conf.5 | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/src/starter/ipsec.conf.5 b/src/starter/ipsec.conf.5 index eefd216fb..fa66c886d 100644 --- a/src/starter/ipsec.conf.5 +++ b/src/starter/ipsec.conf.5 @@ -646,7 +646,9 @@ private subnet behind the left participant, expressed as if omitted, essentially assumed to be \fIleft\fB/32\fR, signifying that the left end of the connection goes to the left participant only. When using IKEv2, the configured subnet of the peers may differ, the -protocol narrows it to the greates common subnet. +protocol narrows it to the greatest common subnet. Further, IKEv2 supports +multiple subnets separated by commas. IKEv1 only interprets the first subnet +of such a definition. .TP .B leftsubnetwithin the peer can propose any subnet or single IP address that fits within the |