Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Max_Mog
Explorer

Syntax of vpn exclusion in crypt.def

Hello Community,

Have questions regarding the syntax of the vpn exclusion in crypt.def.

1) Is it possible to configure several dynamic groups for a gateway? For example:
all@gw1 vpn_exclude_1={192.168.2.1,192.168.2.255};
all@gw1 vpn_exclude_2={192.168.3.1,192.168.3.255};
all@gw1 vpn_exclude_3={192.168.4.1,192.168.4.255};
... and then use a RULE:
(dst in vpn_exclude_1) or (dst in vpn_exclude_2) or (dst in vpn_exclude_3)

2) What is the syntax to define several hosts or ranges in one exclusion group "vpn_exclude"?

Thank you.

0 Kudos
0 Replies