[strongSwan] About private VPN connectivity between several cluster-groups and one machine

[Noel Kuntze]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

No, sorry. That was wrong. You can do it also with just one connection without virtual IPs by simply ommiting right. It defaults to %any, allowing any host to connect and use the connection.

Am 20.05.2014 23:22, schrieb Noel Kuntze:
>
> Hello Bhavesh,
>
> You can do this. To facilitate efficient client-to-client access, you have to work with virtual IPs and can get it working with just one connection.
> Otherwise you need n connections on the central host.
>
> Regards,
> Noel Kuntze
> 
> Am 20.05.2014 09:50, schrieb bhavesh bhanushali:
> > All, any thoughts on this?
>
> > -- Bhavesh.
>
>
> > On Fri, May 16, 2014 at 1:44 PM, bhavesh bhanushali <bhanushali.b at gmail.com <mailto:bhanushali.b at gmail.com>> wrote:
>
>
> >     A] Scenario:
>
> >     1] I have “n” cluster-groups. Each cluster-group will have 2 machines, machine-1 and machine-2.
>
> >     2] The connection between machine-1 and machine-2 is going over strongSwan VPN.
>
> >     3]Machine-1 connects to a arbitrator-machine over strongSwan VPN connction.
>
> >     Machine-2 connects to the same arbitrator-machine over another strongSwan VPN connection.
>
> >     4] The same arbitrator machine will be connecting to the various machine’s belonging to the various cluster-groups.
>
>
> >     B] Ask :
>
> >     Is this type of configuration supported using strongSwan software?
>
>
> >     C] Reference image:
>
> >     For reference, i have drawn the scenario - http://i.imgur.com/tgCB5oZ.png
>
>
>
>
> >     Thanks,
>
> >     Bhavesh.
>
>
>
>
>
>
> > _______________________________________________
> > Users mailing list
> > Users at lists.strongswan.org
> > https://lists.strongswan.org/mailman/listinfo/users
>
>
> _______________________________________________
> Users mailing list
> Users at lists.strongswan.org
> https://lists.strongswan.org/mailman/listinfo/users

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.22 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=P7an
-----END PGP SIGNATURE-----