[Openswan Users] how can i exclude multiple subnets from one side

[Herbert Xu]

On Sun, Sep 19, 2004 at 06:47:08AM -0400, Ted Kaczmarek wrote:
> 
> You have an example of how to do that?
> Say their is a policy
> for 192.168.0.0/23 
> How would you specify that 
> 192.168.1.0/25 not go through the tunnel
> without adding a specific route for it?

conn bypass
	left=@localip@
	leftsubnet=@localsubnet@
	right=@remoteip@
	rightsubnet=192.168.1.0/25
	type=passthrough
	auto=route

Replace localip/localsubnet with the real addresses.  The value of
remoteip isn't that important.
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert at gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt