[strongSwan] How to make strongswan to use loopback interface?

[Tobias Brunner]

Hi Rudolf,

> Is there a way in strongswan configuration to control this
> process?

No, at the moment the virtual IP address is added to the same interface
that has the address that is used for IKE.  You could change that,
though, in ike_sa.c:set_virtual_ip() (and in child_sa.c where it could
get reinstalled) or directly in the kernel_netlink_net implementation of
kernel_net_t.add_ip().

Regards,
Tobias