[strongSwan-dev] Feature request: to set whether or not to install_route for each connection setting

[Masakazu Asama]

Hello all,

According to the following document, it is noted that in the case of Route-
based VPN, set "charon.install_routes = 0".

https://wiki.strongswan.org/projects/strongswan/wiki/RouteBasedVPN

> First, the route installation by the IKE daemon must be disabled. To do
> this, set charon.install_routes=0 in strongswan.conf.

What if I want to mix Route-based VPN and Policy-based VPN?

It is useful to be able to do the same setting as install_routes for each
connection setting. Like below.

https://github.com/m-asama/strongswan/commit/d22c5f2f33659fb07b78dc297468e4e83a0b1f7d

Is it possible to have these options added?

It would be helpful if you could tell me if you knew other good ways.
There is also a way for deleting the default route from "routing table 220"
at Route-based VPN in the updown script, but there are rare cases where the
updown script is executed prior to the install route, which is not
successful. (When there are many connection cases?)

Regards,
Masakazu
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/dev/attachments/20190513/6fdca970/attachment.html>