[strongSwan] How to make strongswan to use loopback interface?

Tobias Brunner tobias at strongswan.org
Thu Aug 16 11:25:38 CEST 2012

Hi Rudolf,

> Is there a way in strongswan configuration to control this
> process?

No, at the moment the virtual IP address is added to the same interface
that has the address that is used for IKE.  You could change that,
though, in ike_sa.c:set_virtual_ip() (and in child_sa.c where it could
get reinstalled) or directly in the kernel_netlink_net implementation of


More information about the Users mailing list