(racoon 754) Re: make sure remote uses correct subnet

Hi,

* Francis Dupont ([email protected]) wrote:
>  In your previous mail you wrote:
> 
>    My problem:
>    The to connectet subnets are defined in an sainfo. How can i link an
>    sainfo with a remote?
>    
> => with the authorization stuff which is not (yet? :-) in the manual
> but is in the parser: "sainfo <idsrc> <iddst> from <id1>" where
> id1 is the phase one ID.

for my understanding

i have:

remote anonymous {
    ...
    peers_identifier fqdn "host.domain.tld";
}

sainfo address 10.0.1.0/24 any address 192.168.1.0/24 any from faqn
"host.domain.tld" { ... }

This should allow the remote which authenticated as "host.domain.tld" to
create the tunnel. Right?

from my prefious tests this seems not to work, but i will give it
another try.

thx
sascha