<html><head><meta http-equiv="Content-Type" content="text/html charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">Rescued from the spam bucket. Please remember to subscribe to the mailing list before posting to it.<br class=""><div><br class=""><div class=""><div class=""><span class="" style="font-family: -webkit-system-font, 'Helvetica Neue', Helvetica, sans-serif; color: rgb(127, 127, 127);"><b class="">From: </b></span><span class="" style="font-family: -webkit-system-font, 'Helvetica Neue', Helvetica, sans-serif;">James Bewley <<a href="mailto:james.bewley@telemisis.com" class="">james.bewley@telemisis.com</a>></span></div><div class=""><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Subject: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><b class="">OpenSwan to Cisco ASA with Access Control Lists</b><br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">Date: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class="">April 28, 2016 at 5:02:49 AM EDT<br class=""></span></div><div style="margin-top: 0px; margin-right: 0px; margin-bottom: 0px; margin-left: 0px;" class=""><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif; color:rgba(127, 127, 127, 1.0);" class=""><b class="">To: </b></span><span style="font-family: -webkit-system-font, Helvetica Neue, Helvetica, sans-serif;" class=""><a href="mailto:users@lists.openswan.org" class="">users@lists.openswan.org</a><br class=""></span></div><br class=""><br class=""><div dir="ltr" class="">Hi,<div class=""><br class=""></div><div class="">I am using IPCop which uses OpenSwan under the hood for IPSec. I am trying to set-up a tunnel between this router and a remote site (Cisco ASA).</div><div class=""><br class=""></div><div class="">With a simple setup bridging both networks works and I can get traffic through the tunnel in both directions across the entire IP range.</div><div class=""><br class=""></div><div class="">The remote site now wants to limit the access using an ACL and informs me that our end will also need to implement this ACL for the connection to be established. Once they apply the ACL the IPSec tunnel goes down so assume he is right.</div><div class=""><br class=""></div><div class="">So, how do I configure OpenSwan to match the ACL; do i need to defined a 'subnet' for each remote IP address? Is there another way?</div><div class=""><br class=""></div><div class=""><div class=""><div class="gmail_signature"><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><div dir="ltr" class=""><br class="">Best,<br class=""><font size="2" class="">James <br class=""></font></div></div></div></div></div></div></div></div>
</div></div>
<br class=""><br class=""></div></div></div><br class=""></body></html>