[prev in list] [next in list] [prev in thread] [next in thread] 

List:       strongswan-users
Subject:    Re: [strongSwan] Narrowing TS for a specific host
From:       Martin Willi <martin () strongswan ! org>
Date:       2010-02-03 12:35:01
Message-ID: 1265200501.2331.114.camel () martin-desktop
[Download RAW message or body]

Hi,

> Which one of "from-HOST" or "with-SCTP" conns will install a policy with
> a higher priority?

> conn from-HOST
>      leftsubnet=10.5.0.1
>      rightsubnet=0.0.0.0/0
> 
> conn with-SCTP
>      leftsubnet=10.5.0.1
>      rightsubnet=0.0.0.0/0
>      rightprotoport=SCTP
>      leftprotoport=SCTP

"with-SCTP" is more specific and will therefore have a higher priority.

Regards
Martin

_______________________________________________
Users mailing list
Users@lists.strongswan.org
https://lists.strongswan.org/mailman/listinfo/users
[prev in list] [next in list] [prev in thread] [next in thread]