[Openswan Users] IP subnet range

Paul Wouters paul at xelerance.com
Tue Apr 20 08:17:49 EDT 2010


On Mon, 19 Apr 2010, Mike A. Leonetti wrote:

> Is there a way to set the subnet to an IP range instead of an entire
> subnet?  I need to satisfy this message when I try and bring up a VPN to
> a Sonicwall.
>
> peer client ID payload in Quick I1, ID_IPV4_ADDR_RANGE 192.168.1.21 -
> 192.168.1.22 unacceptable: not a valid subnet

It has to be CIDR notation. Any other "ranges" are not allowed, and you'll
have to split it out into multiple CIDR's if possible.

Paul


More information about the Users mailing list