[strongSwan] Source routing with StrongSwan

Hoggins! hoggins at radiom.fr
Mon Dec 12 14:47:17 CET 2016


Hello,

I have a router establishing a connexion to a peer via StrongSwan.
Everything is good.
Now I would like that some of the hosts connected to that router be
directed to a specific gateway for accessing 0.0.0.0

So the gateway I want is 192.168.55.3, on the remote LAN. On my local
LAN, 192.168.22.10 is establishing the tunnel, and serving resources for
its 192.168.22.0/24 network.
I would like this local network to reach the Internet through
192.168.55.3, and not the local gateway.

I created a table in rt_tables (table 100), and added the following rule :

    ip rule add from 192.168.22.0/24 table 100

But of course, when I do this :

    ip route add default via 192.168.55.3 table 100

...it answers that host 192.168.55.3 is unreachable. I guess it's
because it's a non-local host, not present in the local routing table.

How could I achieve this ?

Thanks !

    Hoggins!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20161212/94185660/attachment.sig>


More information about the Users mailing list