[strongSwan] updown script not adding routes

Tobias Brunner tobias at strongswan.org
Wed Feb 18 11:38:03 CET 2015


Hi Dennis,

>> A route should still get installed to table 220 by the kernel-netlink
>> plugin (on Linux).  If that's not the case check the log for errors.
> 
> Is there a way to list the tables that are in use? How does one detect
> the existence of this table?

You can see which routing tables are used in which order and for what
traffic with the `ip rule` command.  The routes for each table can be
viewed with `ip route list table <number|name>` (when using `all`
instead of a number or name all routes are listed).  The mapping between
numbers and names is determined by `/etc/iproute2/rt_tables`.

strongSwan will install its routes to table 220 by default (can be
configured via ./configure and/or strongswan.conf) and add a rule to use
that table with a given priority (220 by default, but may be changed
too).  This avoids any conflicts with routes present in the default
routing tables.

Regards,
Tobias



More information about the Users mailing list