[strongSwan] trouble with the traffic selector
martin at strongswan.org
Fri Oct 25 09:39:28 CEST 2013
> With this when I run tcpdum on both tun0 and wlan0, I see all the ESP
> packets going through Wlan0 and not tun0.
I'd say that's the idea; plain packets go over the virtual adapter,
encrypted ones over your physical connection.
> What am I missing here? Why is the route added as 0.0.0.0/1?
> 0.0.0.0/1 dev tun0 scope link
> 22.214.171.124/1 dev tun0 scope link
The default route (0.0.0.0/0) gets split up two sub-routes covering the
same range. This is done to avoid any conflicts with the default route
and to enforce a higher priority for the VPN connection.
More information about the Users