[strongSwan] xAuth request for VICI

Tobias Brunner tobias at strongswan.org
Tue Mar 3 12:08:36 CET 2015


>> 1) Is there alternative for 'leftfirewall=yes' in the VICI interface to
>> automatically setup iptables rules?
> 
> There is no option for the default updown script, but you may manually
> specify "ipsec _updown" in the CHILD_SA "updown" configuration option.

Actually, the command equivalent to `leftfirewall=yes` is
`ipsec _updown iptables`.

Regards,
Tobias



More information about the Users mailing list