<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
.MsoChpDefault
{mso-style-type:export-only;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body lang="EN-US" link="blue" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">I can’t speak to “support”, but it definitely works. See <a href="https://github.com/gitbls/pistrong">
https://github.com/gitbls/pistrong</a>. The makeTunnel script can build this.</p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="mso-element:para-border-div;border:none;border-top:solid #E1E1E1 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal" style="border:none;padding:0in"><b>From: </b><a href="mailto:c_harder@arcor.de">Christoph Harder</a><br>
<b>Sent: </b>Friday, November 13, 2020 12:08 AM<br>
<b>To: </b><a href="mailto:users@lists.strongswan.org">users@lists.strongswan.org</a><br>
<b>Subject: </b>[strongSwan] initiate from both sides</p>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Hello everyone,<br>
<br>
I'm using Strongswan on FreeBSD and wanted to ask if it is possible to have a tunnel initiated by both sides?<br>
Currently I have one side witch uses start/restart/start for the start/dpd/stop actions and one side that uses trap/trap/trap.<br>
However since I have dynamic ips on both sides, I'm relying on dynamic dns to find the other host. But propagation of the new address takes a while, which results in delays after the ip of the responder changes.<br>
If both sides would be initiating/reinitiating the tunnels, the problem would be solved because if one side can't initiate the tunnel, due to dns propagation delays the other side would be able to connect. (Well, unless both sides get new ips at the same time.)<br>
Is this kond of configuration supported?<br>
<br>
Best regards,<br>
Christoph<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>