[strongSwan] Strongswan using VTI - got it working!
olivier_pelerin at hotmail.com
Fri Dec 19 15:11:06 CET 2014
Quick question, If I understand you well, it's a global setting.
Are you planning to add a knob under the conn itself? It would be nice to be able to control it per conn.
> Subject: Re: [strongSwan] Strongswan using VTI - got it working!
> From: martin at strongswan.org
> To: olivier_pelerin at hotmail.com
> CC: schwarz at gaertner.de; noel at familie-kuntze.de; users at lists.strongswan.org
> Date: Fri, 19 Dec 2014 15:07:09 +0100
> > Question: what is the use of that table 220? Do we have a CLI to avoid
> > Strongswan installing that route? It's not necessary in case of VTI.
> strongSwan installs routes for negotiated policies to a dedicated
> routing table mainly for two reasons:
> * Avoid any conflicts with the main routing table, for example
> with the default route
> * Ignore routes from this table when doing route lookups for IKE
> traffic; IKE packets should always bypass the tunnel.
> To disable automatic route installation, set the install_routes option
> to no in the strongswan.conf "charon" section. The routing_table and
> routing_table_prio options allow you to customize installation of
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users