[strongSwan] Question on selecting source address
Jaehong Park
jaehong.park at illumio.com
Fri May 6 17:26:01 CEST 2016
Yes. It looks like this is the one.
Sorting by priority which will results in selecting no more specific ip address as a source.
> On May 6, 2016, at 6:46 AM, Tobias Brunner <tobias at strongswan.org> wrote:
>
>>> After query RTM_GETROUTE, it will collect all the possible route entries.
>>>
>>> With above network setup it will collect two route entries to
>>> destination 10.2.1.xx.
>>
>> Yes, the default route and with higher priority the more specific route
>> to 10.2.0.0/16.
>
> Actually, I just noticed the metrics set on the routes (0 on default, 1
> on the 10.x.0.0/16 routes). Please refer to [1] for an explanation why
> this could lead to the wrong route/source address selection.
>
> Regards,
> Tobias
>
> [1] https://wiki.strongswan.org/issues/1416
>
More information about the Users
mailing list