<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;background-color:#FFFFFF;font-family:Calibri,Arial,Helvetica,sans-serif;">
<p>hello, <br>
</p>
<p><br>
</p>
<p>I got multiple road warriors to logon and get specific virtualip from strongswan. I have been successful got it works with charon/ipsec.conf. unfortunally, debian 8 have been move to systemd, so I have to change from ipsec.conf to swanctl.conf because of
charon-systemd. the following is my ipsec.conf on strongswan gateway:</p>
<p><br>
<br>
config setup<br>
# uniqueids=never<br>
<br>
#############################################<br>
# ikev2 road warrios pubkey template<br>
#############################################<br>
conn ikev2-rw-pub-template<br>
keyexchange=ikev2<br>
left=%defaultroute<br>
leftauth=pubkey<br>
#leftfirewall=yes<br>
leftsubnet=0.0.0.0/0<br>
leftcert=gw1.jklab.cert.pem<br>
leftid=gateway1.jklab.qmcc<br>
right=%any<br>
rightauth=pubkey<br>
auto=add<br>
<br>
# ikev2 road warrios pubkey linux client<br>
conn ikev2-rw-pub-linux-ssTester<br>
also=ikev2-rw-pub-template<br>
#rightdns=192.168.5.12<br>
rightsourceip=192.168.8.10<br>
rightid="ssTester@jklab.qmcc"<br>
<br>
# ikev2 road warrios pubkey windows7+ client<br>
conn ikev2-rw-pub-win7-chenrui<br>
also=ikev2-rw-pub-template<br>
ike=aes256-sha1-modp1024!<br>
rekey=no<br>
rightsourceip=192.168.8.2<br>
rightid="OU=syharman, CN=chenrui@syharman.qmcc"<br>
<br>
how to translate it to swanctl.conf?<br>
</p>
</div>
</body>
</html>