[strongSwan] By default strongswan inserts related routes to routing table 220!!

Andreas Steffen andreas.steffen at strongswan.org
Fri Jun 10 20:59:37 CEST 2011


Oops, the correct syntax is

  ./configure  --with-routing-table=<table number> \
             [ --with-routing-table-number=<table_priority> ]

Andreas

On 10.06.2011 20:55, Andreas Steffen wrote:
> Hello,
> 
> for IKEv1 and IKEv2 you can define the actual routing table
> and additionally the table priority during compile time with
> 
>   ./configure  --with-routing-table <table number> \
>              [ --with-routing-table-number <table_priority> ]
> 
> IKEv1 inserts the routing table with the _updown script
> 
> http://wiki.strongswan.org/projects/strongswan/repository/revisions/master/entry/src/_updown/_updown.in#L153
> 
> For IKEv2 only, a runtime configuration is possible with the
> /etc/strongswan.conf entry
> 
> charon {
>     routing_table = <table number>
>     routing_table_prio = <table_priority>
> }
> 
> Best regards
> 
> Andreas
> 
> On 10.06.2011 19:03, nima chavooshi wrote:
>> Hi
>> In my new project I have implemented StrongSwan and I could setup
>> IPsec tunnel to another linux (same strongswan version) via IKE2 and
>> also to Cisco via IKE1. after some investigation to strongswan I found
>> that by default strongswan inserts related routes to routing table
>> 220.
>> 1- Is there any solution to change this number?that means, via
>> configuration I can set this number to another one (ex, 200)?
>> 2- Where does StrongSwan insert related routes in IKE1?because I could
>> not find any routing table that new routes has been inserted!
>>
>> Thanks in advance
>>
>>
>> --
>> N.Chavoshi

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Linux VPN Solution!                www.strongswan.org
Institute for Internet Technologies and Applications
University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[ITA-HSR]==




More information about the Users mailing list