[strongSwan] Road-Warrior Setup with different PSKs

Klaus Darilion klaus.mailinglists at pernau.at
Tue Nov 22 10:41:36 CET 2011


Hi!

I wonder if it's possible to have the road-warrior setup with different 
PSKs for different users? E.g. if strongswan fails to decode a packet 
with the PSK it should find for another PSK with matching IP addresses?

I tried:

22.19.53.13 %any : PSK "pass1"
22.19.53.13 %any : PSK "pass2"
22.19.53.13 %any : PSK "pass3"

I seems that stronSwan only uses the first match when decoding the packet.

Is there any workaround to use different PSKs for the road warriors?


Thanks
Klaus




More information about the Users mailing list