<div dir="ltr">There are other possible solutions, but my inclination would be to run strongswan and any other VPN related services in a distinct network namespace. This would not only address your issue, but it also prevents accidentally "crossing the streams" between the VPN and other public networks to which the host is attached. A common issue is the IKE daemon fails to start or is misconfigured, and so the policies that normally encrypt traffic on egress don't get installed, and traffic that should have been encrypted is leaked on a public interface.<div><br></div><div><a href="https://vincent.bernat.ch/en/blog/2017-route-based-vpn">https://vincent.bernat.ch/en/blog/2017-route-based-vpn</a> is a tutorial I've found helpful in the past. It covers BGP and a lot of other things beyond your particular problem, but maybe ignoring those parts you may still find it useful.<br></div></div><br><div class="gmail_quote"><div dir="ltr">On Wed, Sep 26, 2018 at 3:01 PM Doug Tucker <<a href="mailto:doug.tucker@newscycle.com">doug.tucker@newscycle.com</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_7645942624766206094divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr">
<p style="margin-top:0;margin-bottom:0">I've done some searching and am not finding any info on this. We had a client who wanted to offer a /16 as his right subnet and his outside peer IP of his ASA fell into the /16 they were offering. With a cisco ASA this
is a non issue as in this type of scenario cisco exempts out that single IP from the routing table but with strongswan 5.6.3 it appears to not do so by default and caused some odd routing anomalies to this IP. Does anyone know of a configuration directive
for dealing with this?</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<div id="m_7645942624766206094Signature">
<div id="m_7645942624766206094divtagdefaultwrapper" dir="ltr" style="background-color:rgb(255,255,255)">
<p style="margin:0in 0in 0.0001pt"></p>
<p style="font-size:12pt;color:rgb(0,0,0);margin:0in 0in 0.0001pt"><font face="Helvetica, sans-serif"><b>Doug Tucker</b></font></p>
<p style="color:rgb(0,0,0);margin:0in 0in 0.0001pt"><font face="Helvetica, sans-serif"><span style="font-size:13.3333px">Sr. Network Administrator</span></font></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt">
<span style="font-size:10pt;font-family:Helvetica,sans-serif;color:black"><b>o:
</b><a href="tel:(817)%20975-5832" value="+18179755832" target="_blank">817.975.5832</a></span><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black"><b> | </b>m: <a href="tel:(817)%20975-5832" value="+18179755832" target="_blank">817.975.5832</a> </span></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;margin:0in 0in 0.0001pt">
<b style="color:rgb(0,0,0)"><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:black">e:</span></b><span style="color:black;font-size:10pt;font-family:Helvetica,sans-serif"> <a href="mailto:doug.tucker@newscycle.com" target="_blank">doug.tucker@newscycle.com</a></span></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt;min-height:14px">
<b><span style="font-size:9.0pt;font-family:"Helvetica",sans-serif;color:#955072"> </span></b></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 15pt">
<span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#4f4e54"><a href="http://www.newscycle.com/" id="m_7645942624766206094LPNoLP" target="_blank"><span style="color:#3b74a9;text-decoration:none"><img border="0" width="250" height="41" id="m_7645942624766206094_x0000_i1025" alt="Newscycle Solutions" class="m_7645942624766206094size-full m_7645942624766206094wp-image-6318 m_7645942624766206094alignleft" style="max-width:100%;border-width:0px;float:left;height:auto;margin:5px 20px 20px 0px" src="http://www.newscyclesolutions.com/wp-content/uploads/2013/09/newscycle-logo-email.png"></span></a></span></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt;min-height:18px">
<b><span style="font-size:11.5pt;font-family:"Helvetica",sans-serif;color:#01abfc">Breakthrough technologies for media</span></b></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt">
<b><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#042eee"> </span></b></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt">
<span class="m_7645942624766206094s1"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#00acfc"><a href="http://www.twitter.com/newscycle_news" id="m_7645942624766206094LPNoLP" target="_blank"><span style="color:#00acfc">Twitter</span></a></span></b></span><span class="m_7645942624766206094s2"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif;color:#00acfc">
| <a href="https://www.facebook.com/NEWSCYCLESolutions" id="m_7645942624766206094LPNoLP" target="_blank"><span class="m_7645942624766206094s3"><span style="color:#00acfc;text-decoration:none">Facebook</span></span></a> | <a href="https://www.linkedin.com/company/newscycle-solutions" id="m_7645942624766206094LPNoLP" target="_blank"><span class="m_7645942624766206094s3"><span style="color:#00acfc;text-decoration:none">Linkedin</span></span></a></span></b></span><b><span style="font-size:10.0pt;font-family:"Helvetica",sans-serif;color:#042eee"></span></b></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt;min-height:13px">
<b><span style="font-size:8.5pt;font-family:"Helvetica",sans-serif;color:#88898b"> </span></b></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt">
<span style="font-size:8.5pt;font-family:"Helvetica",sans-serif;color:#88898b">CONFIDENTIALITY NOTICE: The contents of this email message and any attachments are intended solely for the addressee(s) and may contain confidential and/or privileged information
and may be legally protected from disclosure. If you are not the intended recipient of this message or their agent, or if this message has been addressed to you in error, please immediately alert the sender by reply email and then delete this message and any
attachments. If you are not the intended recipient, you are hereby notified that any use, dissemination, copying, or storage of this message or its attachments is strictly prohibited.</span></p>
<br>
<p></p>
<p style="font-size:12pt;font-family:Calibri,Arial,Helvetica,sans-serif;color:rgb(0,0,0);margin:0in 0in 0.0001pt">
<span style="font-size:8.5pt;font-family:"Helvetica",sans-serif;color:#88898b"></span></p>
</div>
</div>
</div>
</div>
</blockquote></div>