[strongSwan] Charon doesn't set the routes

Martin Willi martin at strongswan.org
Mon Oct 3 10:07:13 CEST 2011


Hi,

> In kernel_netlink_ipsec.c add_policy methed, the code checks if mode !=
> MODE_TRANSPORT to insert to route.

Yes. Why do you need an additional route in transport mode? There are
usually no new addresses or routes involved, transport mode just
protects the traffic between two hosts that already have a route.

Regards
Martin





More information about the Users mailing list