Re: [Users] Static virtual ip address

From: Andreas Steffen <andreas.steffen(at)strongsec.net>
Date: Wed Feb 19 2003 - 11:17:09 EST

• Does the subject distinguished name of test2-cert.pem differ from the DN of test-cert.pem?
• What does "still seems to work" mean? Can you acces a host in 172.30.0.0/16 fron 172.30.0.5? Main Mode should succeed with a different virtual IP but Quick Mode should not. What might pose a problem is that 172.30.0.5/32 and 172.30.0.100/32 are subnets of 172.30.0.0/16. In order to analyze the connection setup I would need a barf with plutodebug=all activated in ipsec.conf

Regards

Andreas

Chris Ehlers wrote:
> Hi,
>
> Could this possibly be a bug... or am I missunderstanding the way the

---

Andreas Steffen                   e-mail: andreas.steffen@strongsec.com
strongSec GmbH                    home:   
http://www.strongsec.com
Alter Zürichweg 20                phone:  +41 1 730 80 64

CH-8952 Schlieren (Switzerland) fax: +41 1 730 80 65

==========================================[strong internet security]===


_______________________________________________

Users mailing list
Users@lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users Received on Thu Feb 20 00:09:51 2003