[strongSwan] Site to Site VPN configuration using multiple traffic selectors

[Erne, Heiner]

Hello,

I would like to ask how to configure with strongSwan a site to site configuration with multiple traffic selectors in one IKE setup, e.g.

Site1  <------------------------------------------------------------> Site 2

Traffic selector 1 (shall have one ESP tunnel with this traffic selector)
192.168.1.0/24                               <->                                      172.16.1.0/24

Traffic selector 2 (shall have another ESP tunnel with this traffic selector)
192.168.3.0/24                               <->                                      172.16.3.0/24

Traffic selector 3...

And only this traffic shall go into the tunnels and the traffic selectors shall be exchanged at IKE(v1 or v2) setup.

Thanks for any help.

Best regards,

Heiner.

--

Heiner Erne | Development Industrial Ethernet | Hirschmann Automation and Control GmbH
Stuttgarter Straße 45-51 |72654 Neckartenzlingen | Germany
Phone +49 7127 14 - 1727 | Fax +49 7127 14 - 1600
mailto://Heiner.Erne@belden.com<mailto:Heiner.Erne@belden.com> | www.beldensolutions.com<http://www.beldensolutions.com/> | www.blog.beldensolutions.com<http://www.blog.beldensolutions.com/>

Hirschmann Automation and Control GmbH, Neckartenzlingen
Register Court: Stuttgart, Trade Register No.: HRB 225927
VAT No.: DE 814 212 604
Managing Director: Christoph Gusenleitner, Henk Derksen, Wolfgang Schenk, Johannes Pfeffer, Oliver Steiner

Privileged/Confidential Information of Belden may be contained in this message.
If you are not the addressee of this message, you may not read, copy or use this message, or deliver this message to anyone.
In such event, you should destroy the message and kindly notify the sender by reply e-mail.

It is understood that opinions or conclusions that do not relate to official business of Belden are neither given nor endorsed by Belden.



DISCLAIMER:
Privileged and/or Confidential information may be contained in this
message. If you are not the addressee of this message, you may not
copy, use or deliver this message to anyone. In such event, you
should destroy the message and kindly notify the sender by reply
e-mail. It is understood that opinions or conclusions that do not
relate to the official business of the company are neither given
nor endorsed by the company.
Thank You.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20160219/8a103663/attachment-0001.html>