[strongSwan] Roadwarriors redirect the whole traffic

[Michele Baldessari]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 10/11/2010 09:39 AM, Martin Willi wrote:
>> is there a simple way to configure a stronswan vpn concentrator to
>> force the roadwarriors to redirect the whole traffic in the vpn tunnel?
> 
> Depends a little on your road warrior configuration. Such clients
> usually propose to tunnel 0.0.0.0/0 destinations. In IKEv2, the
> responder has a chance to narrow this to a smaller subnet. But if it
> doesn't, the installed policies/routes will automatically route all
> traffic through the tunnel.

Thanks Martin, it worked perfectly.

regards,
Michele

- --
Michele Baldessari <michele at acksyn.org>
C2A5 9DA3 9961 4FFB E01B  D0BC DDD4 DCCB 7515 5C6D



-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iQIcBAEBCAAGBQJMsvE7AAoJEN3U3Mt1FVxtmX8P/0wgIRLQFqoCChhMDN024k8X
h78mytpl17Bz+olQFSLZnI3t3s50Xd5M+TlsY2Lyiwzprip1os14bpU+OaIsBQE0
Nc73buIoNheZwK7CQN2E2bv4RL6bSsdcKIQLjZVkdUGCJs/hq9sHVBhWaNpI6ig1
mCTOhHapHrWV0GeBpGaRDDthteUq9YNVC53qe0FlKqJlpjKMAsX5U5oo3cABzM/y
ZmNiDtaWy8Ra+DGkqTvyrJ5wNNIwMLkf05AdVPglroptVvse6BCjFGK6QW9cahVf
1edtoqc7n+nJlgd53JDE9ncp9zw5m8vu9xGSv6STeVg4+TRzcDn4kddmDCtt2aO8
8NqM/SLixRKaKrQM6Ntx9FQdDP0IcZOts9gso6vjZD7MOci0utC+8ap6Tl5Cx19S
nHQQQQwBJrXnlk0bdEYmHOtfZuWFXw43rSE397sgY/mXbHJYqyd4xmFZuC6LHBgB
zPsZaq8giRIX+Z8zJMMU4u2CLxGd/UG/y6JVau1lg4IPa+4A9XVDTJlJrVoIfjK/
3UNoKMyMq8FtXqUnZ/aUWyyF6kNoJ8+/2tDj2wu4i6ttL2aN/iTKRR1CpbAFQ6SX
oLu44G8el9Ynurgad+5u30PUsX6wUkzhlKQ48MRa+hQkl5BKGGT2Xvq1Rcp+R0ET
43eXHjNbS0Ekc5c2VTza
=VWC7
-----END PGP SIGNATURE-----