Comment 1 for bug 1905565

Revision history for this message
Tobias Brunner (tobias-strongswan) wrote :

That error doesn't seem related (looks more like something the bypass-lan plugin would log). So please post the complete log.

Also, your manual config creates two CHILD_SAs, one for each family. That's not how the NM plugin operates. It assumes the responder is able to narrow the traffic selectors of a single CHILD_SA appropriately (it proposes 0.0.0.0/0 AND ::/0 as remote traffic selectors). If the device you connect to is unable to do that and requires two CHILD_SAs, you won't be able to use both address families with the NM plugin.