[strongSwan-dev] Binding interfaces to IPsec

Martin Willi martin at strongswan.org
Thu May 5 14:47:20 CEST 2011


> I'm using StrongSWAN and I'd need to bind some interfaces to IPsec and
> not all of them. Is there any option to obtain this behavior?

No, binding to specific interfaces is currently not supported. Linux
handles ESP traffic independent from interfaces. For IKE, the daemon
currently binds on all interfaces. You could use firewalling to
block/allow IKE/ESP traffic on selected interfaces.


More information about the Dev mailing list