[strongSwan-dev] SNMP and Strongswan

Philip Prindeville philipp_subx at redfish-solutions.com
Tue Mar 3 00:26:40 CET 2015


I'm looking at adding MIB support (because a client requested it) and 
wondering what prior work anyone else had done in this realm.

I've seen that there's an RFC (4807) for SPD configuration, but I've not 
found an IPsec SA MIB.

SA's could be abstracted onto RFC-4087.  I'm less than enthusiastic 
about this, though, as it doesn't provide trap support.

I'm just starting to think about this problem: has anyone done a deep 
dive into it?

What work we'd do we'd probably want to upstream so we wouldn't have to 
keep patching it into builds.

Thanks,

-Philip



More information about the Dev mailing list