IPv6 ipsec.conf leftsubnet different than actual subnetOpenswan tunnel to remote public NAT'd hostvServer:...

Is there a hemisphere-neutral way of specifying a season?

Emailing HOD to enhance faculty application

Is it legal for company to use my work email to pretend I still work there?

How do conventional missiles fly?

How do I write bicross product symbols in latex?

How much of data wrangling is a data scientist's job?

How can saying a song's name be a copyright violation?

Etiquette around loan refinance - decision is going to cost first broker a lot of money

Stopping power of mountain vs road bike

What does it mean to describe someone as a butt steak?

Forgetting the musical notes while performing in concert

Does casting Light, or a similar spell, have any effect when the caster is swallowed by a monster?

Is "remove commented out code" correct English?

Is the Joker left-handed?

I'm flying to France today and my passport expires in less than 2 months

SSH "lag" in LAN on some machines, mixed distros

AES: Why is it a good practice to use only the first 16bytes of a hash for encryption?

Infinite Abelian subgroup of infinite non Abelian group example

What mechanic is there to disable a threat instead of killing it?

How to show the equivalence between the regularized regression and their constraint formulas using KKT

Python: return float 1.0 as int 1 but float 1.5 as float 1.5

Western buddy movie with a supernatural twist where a woman turns into an eagle at the end

If human space travel is limited by the G force vulnerability, is there a way to counter G forces?

What's the point of deactivating Num Lock on login screens?



IPv6 ipsec.conf leftsubnet different than actual subnet


Openswan tunnel to remote public NAT'd hostvServer: Configuring single (/128) assigned IPv6 addresses for use as IP address pool for IPSEC (Strongswan) road warriorsAWS StrongSwan IPSec VPNipsec.conf leftsubnet different than actual subnetRouting through IPSec tunnelIPsec VPN with subnet overlapping and NATStrongswan IPSec host to network established but no traffic flowClient packets not forwarded over strongSwan IPsec site-to-site tunnel for client and gateway on the same serverStrongswan to Cisco ASA with multiple right subnetStrongSwan - Cisco RV042 gateway-to-gateway IPsec VPN






.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}







0















I am setting up Strongswan and in my setup I have to tunnel from a subnet that are in a different network than Strongswan.



left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
leftid=<a public IP address>
leftsubnet=2111:0db8:85a3::/64
right=<public IP address of remote system>
rightid=<same ip as right>
rightsubnet=<same ip as right/32>


Unfortunately, I strongswan wasn't able to forward packets correctly eventhough that it is receing them.



However, when I configure the left subnet to the same subnet strongswan instance belongs to, the association works and strongswan forward the packets without anu issue.



example:



left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
leftid=<a public IP address>
leftsubnet=2001:0db8:85a3::/64
right=<public IP address of remote system>
rightid=<same ip as right>
rightsubnet=<same ip as right/32>


I am wondering is this a limitation or I can fix it ?









share







New contributor




user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.



























    0















    I am setting up Strongswan and in my setup I have to tunnel from a subnet that are in a different network than Strongswan.



    left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
    leftid=<a public IP address>
    leftsubnet=2111:0db8:85a3::/64
    right=<public IP address of remote system>
    rightid=<same ip as right>
    rightsubnet=<same ip as right/32>


    Unfortunately, I strongswan wasn't able to forward packets correctly eventhough that it is receing them.



    However, when I configure the left subnet to the same subnet strongswan instance belongs to, the association works and strongswan forward the packets without anu issue.



    example:



    left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
    leftid=<a public IP address>
    leftsubnet=2001:0db8:85a3::/64
    right=<public IP address of remote system>
    rightid=<same ip as right>
    rightsubnet=<same ip as right/32>


    I am wondering is this a limitation or I can fix it ?









    share







    New contributor




    user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
    Check out our Code of Conduct.























      0












      0








      0








      I am setting up Strongswan and in my setup I have to tunnel from a subnet that are in a different network than Strongswan.



      left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
      leftid=<a public IP address>
      leftsubnet=2111:0db8:85a3::/64
      right=<public IP address of remote system>
      rightid=<same ip as right>
      rightsubnet=<same ip as right/32>


      Unfortunately, I strongswan wasn't able to forward packets correctly eventhough that it is receing them.



      However, when I configure the left subnet to the same subnet strongswan instance belongs to, the association works and strongswan forward the packets without anu issue.



      example:



      left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
      leftid=<a public IP address>
      leftsubnet=2001:0db8:85a3::/64
      right=<public IP address of remote system>
      rightid=<same ip as right>
      rightsubnet=<same ip as right/32>


      I am wondering is this a limitation or I can fix it ?









      share







      New contributor




      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.












      I am setting up Strongswan and in my setup I have to tunnel from a subnet that are in a different network than Strongswan.



      left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
      leftid=<a public IP address>
      leftsubnet=2111:0db8:85a3::/64
      right=<public IP address of remote system>
      rightid=<same ip as right>
      rightsubnet=<same ip as right/32>


      Unfortunately, I strongswan wasn't able to forward packets correctly eventhough that it is receing them.



      However, when I configure the left subnet to the same subnet strongswan instance belongs to, the association works and strongswan forward the packets without anu issue.



      example:



      left=2001:0db8:85a3:0000:0000:8a2e:0370:7334
      leftid=<a public IP address>
      leftsubnet=2001:0db8:85a3::/64
      right=<public IP address of remote system>
      rightid=<same ip as right>
      rightsubnet=<same ip as right/32>


      I am wondering is this a limitation or I can fix it ?







      ipsec strongswan openswan





      share







      New contributor




      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.










      share







      New contributor




      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.








      share



      share






      New contributor




      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.









      asked 3 mins ago









      user655561user655561

      1012




      1012




      New contributor




      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.





      New contributor





      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






      user655561 is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
      Check out our Code of Conduct.






















          0






          active

          oldest

          votes












          Your Answer








          StackExchange.ready(function() {
          var channelOptions = {
          tags: "".split(" "),
          id: "2"
          };
          initTagRenderer("".split(" "), "".split(" "), channelOptions);

          StackExchange.using("externalEditor", function() {
          // Have to fire editor after snippets, if snippets enabled
          if (StackExchange.settings.snippets.snippetsEnabled) {
          StackExchange.using("snippets", function() {
          createEditor();
          });
          }
          else {
          createEditor();
          }
          });

          function createEditor() {
          StackExchange.prepareEditor({
          heartbeatType: 'answer',
          autoActivateHeartbeat: false,
          convertImagesToLinks: true,
          noModals: true,
          showLowRepImageUploadWarning: true,
          reputationToPostImages: 10,
          bindNavPrevention: true,
          postfix: "",
          imageUploader: {
          brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
          contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
          allowUrls: true
          },
          onDemand: true,
          discardSelector: ".discard-answer"
          ,immediatelyShowMarkdownHelp:true
          });


          }
          });






          user655561 is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f961610%2fipv6-ipsec-conf-leftsubnet-different-than-actual-subnet%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown

























          0






          active

          oldest

          votes








          0






          active

          oldest

          votes









          active

          oldest

          votes






          active

          oldest

          votes








          user655561 is a new contributor. Be nice, and check out our Code of Conduct.










          draft saved

          draft discarded


















          user655561 is a new contributor. Be nice, and check out our Code of Conduct.













          user655561 is a new contributor. Be nice, and check out our Code of Conduct.












          user655561 is a new contributor. Be nice, and check out our Code of Conduct.
















          Thanks for contributing an answer to Server Fault!


          • Please be sure to answer the question. Provide details and share your research!

          But avoid



          • Asking for help, clarification, or responding to other answers.

          • Making statements based on opinion; back them up with references or personal experience.


          To learn more, see our tips on writing great answers.




          draft saved


          draft discarded














          StackExchange.ready(
          function () {
          StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f961610%2fipv6-ipsec-conf-leftsubnet-different-than-actual-subnet%23new-answer', 'question_page');
          }
          );

          Post as a guest















          Required, but never shown





















































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown

































          Required, but never shown














          Required, but never shown












          Required, but never shown







          Required, but never shown







          Popular posts from this blog

          117736 Шеррод Примітки | Див. також | Посилання | Навігаційне...

          As a Security Precaution, the user account has been locked The Next CEO of Stack OverflowMS...

          Маріан Котлеба Зміст Життєпис | Політичні погляди |...