>> On Fri 19. Feb 2021 at 5.28, marfabastewart >> <marfabastew...@protonmail.com> wrote:
>> If anyone else is configuring a VPN between an OpenBSD responder and >> a Debian Buster initiator with Strongswan ... snip snip ... >> On the OpenBSD responder, your /etc/iked.conf should be something like: ... snip snip ... >> ikev2 'responder_x509' passive esp \ >> from 0.0.0.0/0 to $vpn_net \ ... snip snip ... >> The examples on strongswan.org >> I saw had "remote_ts = 0.0.0.0" instead of "remote_ts = >> 0.0.0.0/0" -- nothing worked for me until I added the "/0" >> to the end. > On Friday, February 19, 2021 2:24 AM, Ville Valkonen > <weezeld...@gmail.com> wrote: ... snip snip ... > That's because it must match what you've configured on the Openbsd side > (0.0.0.0/0). Thank you very much! I also found out how to get rid of the DNS errors, just sudo apt install resolvconf (I found a post that said one needs resolvconf because of Debian AppArmor.)
