[strongSwan] Question on selecting source address

Jaehong Park jaehong.park at illumio.com
Fri May 6 17:26:01 CEST 2016


Yes. It looks like this is the one.

Sorting by priority which will results in selecting no more specific ip address as a source.


> On May 6, 2016, at 6:46 AM, Tobias Brunner <tobias at strongswan.org> wrote:
> 
>>> After query RTM_GETROUTE, it will collect all the possible route entries.
>>> 
>>> With above network setup it will collect two route entries to
>>> destination 10.2.1.xx.
>> 
>> Yes, the default route and with higher priority the more specific route
>> to 10.2.0.0/16.
> 
> Actually, I just noticed the metrics set on the routes (0 on default, 1
> on the 10.x.0.0/16 routes).  Please refer to [1] for an explanation why
> this could lead to the wrong route/source address selection.
> 
> Regards,
> Tobias
> 
> [1] https://wiki.strongswan.org/issues/1416
> 



More information about the Users mailing list