[strongSwan] except certain protocols from IPsec encryption

Nerijus Baliunas nerijus at users.sourceforge.net
Thu Aug 4 17:24:29 CEST 2011


Hello,

>From 4.5.3 changelog:
The IKEv2 charon daemon allows one to define PASS and DROP shunt policies that, for example, prevent local traffic from going through IPsec connections or except certain protocols from IPsec encryption.

I want to except GRE protocol from IPsec encryption, but want it to go via ipsec tunnel
(only unencrypted). Is it possible?

Regards,
Nerijus




More information about the Users mailing list