3 ms·
Related to this, it doesn't appear that you can set up traffic selectors with this daemon with as much flexibility as you can with StrongSwan. For example, I n
by Mister_Snuggles 6y ago
Related to this, it doesn't appear that you can set up traffic selectors with this daemon with as much flexibility as you can with StrongSwan.
For example, I need traffic selectors that look like this (StrongSwan ipsec.conf):
leftsubnet=192.168.11.0/24,192.168.10.0/24
rightsubnet=10.0.2.0/24,10.0.1.0/24,10.0.3.0/24
It's not obvious how to set this up in iked.conf[0]. I recall something that said this isn't possible in iked.conf, but I can't find that source now.
[0] https://man.openbsd.org/iked.conf.5 https://man.openbsd.org/iked.conf.5