Hi, thanks for your answer.
Markus Friedl schrieb:
AFAIK it's not supported in IKE, so it's not supported in ipsec.conf
Something like "port { 1000 1001 ... }" would be nice too, but also doesn't seem to work. It works for "from/to { IP1 IP2 ... }" though. At least I did not manage to set it up like that with port.
If that currently also isn't possible, it would be a "nice to have" feature for a cleaner ipsec.conf file. Automatic expansion of port ranges would be even better... :-)
Michael
