<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 12pt;
font-family:Calibri
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>Thanks Martin!<br><br>Quick question, If I understand you well, it's a global setting. <br>Are you planning to add a knob under the conn itself? It would be nice to be able to control it per conn.<br><br>Regards,<br><br>Olivier<br><br><div>> Subject: Re: [strongSwan] Strongswan using VTI - got it working!<br>> From: martin@strongswan.org<br>> To: olivier_pelerin@hotmail.com<br>> CC: schwarz@gaertner.de; noel@familie-kuntze.de; users@lists.strongswan.org<br>> Date: Fri, 19 Dec 2014 15:07:09 +0100<br>> <br>> <br>> > Question: what is the use of that table 220? Do we have a CLI to avoid<br>> > Strongswan installing that route? It's not necessary in case of VTI.<br>> <br>> strongSwan installs routes for negotiated policies to a dedicated<br>> routing table mainly for two reasons:<br>> * Avoid any conflicts with the main routing table, for example<br>> with the default route<br>> * Ignore routes from this table when doing route lookups for IKE<br>> traffic; IKE packets should always bypass the tunnel.<br>> <br>> To disable automatic route installation, set the install_routes option<br>> to no in the strongswan.conf "charon" section. The routing_table and<br>> routing_table_prio options allow you to customize installation of<br>> routes.<br>> <br>> Regards<br>> Martin<br>> <br></div> </div></body>
</html>