[strongSwan] Initiator only for certain connections?
tobias at strongswan.org
Mon Jul 18 14:01:19 CEST 2016
> is it possible to tell StrongSwan that it should act as initiator only, but only for certain connections
auto=add? strongSwan does not initiate such connections unless
explicitly told to do so (via `ipsec up`).
> or as responder only, but again only for certain connections?
right=%any or right=<subnet>? The daemon won't be able to initiate such
connections as it doesn't know to which endpoint, so these connections
will only be usable as responder.
> For example, if I would like company A to establish a VPN connection
> into my network (but not vice versa), and I would like to establish a
> (different, of course) VPN connection to company B (but not vice versa),
> how could I achieve that?
Is there a good reason for these requirements?
More information about the Users