[Openswan Users] Remote End Subnet

[Paul Wouters]

On Fri, 29 Feb 2008, Khan, Hammad Aslam wrote:

> 1)
> If we want to access only one private host on remote end instead of whole
> subnet
> will it be OK to write;
>
> rightsubnet=10.10.10.10/32 ?
>
> likewise for left; I want to allow access only for one host
> leftsubnet=11.11.11.11/32

That should work.

> 2)
> My connection's ISAKMP tunnel successfully completes but sticks on
> STATE_QUICK_I1 with remote end error message; Policy Not Defined for src:
> 11.11.11.11 and destination 10.10.10.10

What do the openswan logs say?