[strongSwan] CP(CFG_REQUEST) with multiple INTERNAL_ADDRESS attributes?

[Martin Willi]

Hi Rachel,

> Does Strongswan support IKE v2's CP(CFG_REQUEST) with multiple
> INTERNAL_ADDRESS attributes?

Yes. Starting with strongSwan 5.0.1, strongSwan can send multiple
addresses.

To configure it, define two addresses or explicit/named pools in the
ipsec.conf rightsourceip option, separated by comma. A simple example of
two explicit pools is:

  rightsourceip=10.0.1.0/24,10.0.3.0/24

For each connection, the IKE daemon charon will allocate an address from
both pools and assign it to the client. man ipsec.conf for more details.

Best regards
Martin