andreas.steffen at strongswan.org
Fri Jul 29 16:51:40 CEST 2011
Would it help to bind the virtual IP do a dummy interface, so that
when the physical interface goes away the source route still
exists and remains covered by the traffic selectors and thus by
the transient DROP policy for the TS.
On 07/29/2011 04:12 PM, Tobias Brunner wrote:
> Hi Patricia,
>> I've test also with virtual IP's and I obtain the same behaviour :(
> Ah, yes. The source route installed by charon only covers eth0 and its
> default gateway.
> Andreas, Martin, any ideas?
Andreas Steffen andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution! www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
More information about the Users