Hello Community,
Have questions regarding the syntax of the vpn exclusion in crypt.def.
1) Is it possible to configure several dynamic groups for a gateway? For example:
all@gw1 vpn_exclude_1={192.168.2.1,192.168.2.255};
all@gw1 vpn_exclude_2={192.168.3.1,192.168.3.255};
all@gw1 vpn_exclude_3={192.168.4.1,192.168.4.255};
... and then use a RULE:
(dst in vpn_exclude_1) or (dst in vpn_exclude_2) or (dst in vpn_exclude_3)
2) What is the syntax to define several hosts or ranges in one exclusion group "vpn_exclude"?
Thank you.
