[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: IPSec-ID ?ns



> If you tried it out you should see that isakmpd will ignore duplicate tags
> declared for the same name, so you can't have (for example):
Well yes was_aware that two of the identical parameters would not work. However
was hoping there was a name value pair that could be used so that one could do 
both.. ala
one to indicate gwhost to gwhost ..
The other to indicate network to network. But thanks anyhow:-))
> [Firewall]
> ID-type=                IPV4_ADDR
> Address=                10.1.1.254
> Netmask=                255.255.255.255
 Yes above for host to host but was hoping there was some parameter that
i had missed that could do both.. to the gateway separately host to host ..
> ID-type=                IPV4_ADDR_SUBNET
> Address=                10.1.1.0
> Netmask=                255.255.255.0
 and then network to network .. as described immediately above 
Then again it could be that this section missed something obvious..