[strongSwan] Forecast plug-in.

[Martin Willi]

> 0.2131s / 2079 times in lock created at: dumping 7 stack frame addresses:
>   /usr/lib/ipsec/libstrongswan.so.0 @ 0xb7708000 [0xb774aee5]

This is a lock profiler backtrace. It is usually required only if you
want to find lock bottlenecks, but for normal operation/testing you
should build without the --enable-lock-profiler ./configure option.

> leftsubnet=192.168.0.0/24
> rightsourceip=192.168.0.201-192.168.0.215

First, the forecast plugin requires that you set mark=%unique on the
connection you want to forward broadcasts to/from. Second, your traffic
selectors must include the broadcast/multicast addresses you want to
forward in each direction, as IPsec policy matching is still in place.
Refer to the configuration of moon in the forecast test case [1] for an
example. Windows sends some broadcasts as 255.255.255.255 over the IPsec
tunnel, so you might want to include that address as well.

Regards
Martin

[1]http://git.strongswan.org/?p=strongswan.git;a=commitdiff;h=f1c218d6