[strongSwan] Automatic Addition/Deletion of Ipsec-Policy-based Firewall Rules

[Andreas Steffen]

IPsec policy based  rules are installed with the standard _updown
script which is activated with the ipsec.conf parameter

  leftfirewall=yes

Regards

Andreas

On 08/22/2011 05:05 PM, kvunnava at rockwellcollins.com wrote:
> 
> Hi Guys,
> we have a requirement related to IPSEC-Policy-based Firewall Rules.
> 
> Steps we followed:
> 1] Configured the ipsec.conf with the parameter "leftupdown=<Script Path>".
> 2] Created the script and kept it at right place.
> 
> Once the IKEv1 based Tunnel was UP; it was expected that Execution of
> script to be happen.But thats Not happening.
> 
> Please let me know the Right way to Configure the "Automatic
> Addition/Deletion of Ipsec-Policy-based Firewall Rules".
>  
> -Thanks in Advance,
> VKS.

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==