<html><head><meta http-equiv="Content-Type" content="text/html charset=iso-8859-1"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;"><div>As I remember the native IPsec stack of the Linux 2.6 kernel does not create any special ipsec interfaces but I think you can do this by creating bind the virtual eth0 interface directly to a tap device on the host.</div><div><br></div><div>Thanks,</div><div>Pawel Grzesik</div><div><br><div><div>On 25 Nov 2013, at 11:38, Ccf Cloud <<a href="mailto:ccfcloud@gmail.com">ccfcloud@gmail.com</a>> wrote:</div><br class="Apple-interchange-newline"><blockquote type="cite"><div dir="ltr">Hi,<div><br></div><div>Can some one please answer this question?</div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, Nov 18, 2013 at 6:13 PM, Ccf Cloud <span dir="ltr"><<a href="mailto:ccfcloud@gmail.com" target="_blank">ccfcloud@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">Hi,<div><br></div><div>Is it possible to use TAP interface instead of TUN for establishing end to end tunnel using strongSwan. My problem is this:</div>
<div><br></div><div>I want to bridge the tunnel interface with some other existing interface. Now since tun is an IP layer PPP link, I cannot </div>
<div>add it to the bridge interface. However, having a TAP interface works well with the bridge.</div><div><br></div><div><br></div><div>Any help in this regard will be appreciated.</div><div><br></div><div><br></div><div>
--Regards</div><div> SAM</div></div>
</blockquote></div><br></div><div class="gmail_extra"><br></div><div class="gmail_extra">--Regards</div><div class="gmail_extra"> SAM</div></div>
_______________________________________________<br>Users mailing list<br><a href="mailto:Users@lists.strongswan.org">Users@lists.strongswan.org</a><br>https://lists.strongswan.org/mailman/listinfo/users</blockquote></div><br></div></body></html>