strongSwan

Hello,

I've got a question about the way StrongSwan handles multiple private subnets.

When specifying multiple subnets in the config e.g:

conn test-vpn1
<other lines of config>
rightsubnet=192.168.1.0/24,192.168.2.0/24
type=tunnel
auto=route
dpdaction=hold

....I've found that an SA will only establish between one of the subnets at a time rather than both. To get both to come up I need to split the subnets out into different connections e.g:

conn test-vpn1
<other lines of config>
rightsubnet=192.168.1.0/24
type=tunnel
auto=route
dpdaction=hold

conn test-vpn2
also=test-vpn1
rightsubnet=192.168.2.0/24

I'm just wondering if this is the way it's supposed to work or if I'm missing something?

Many thanks,

Stuart