[strongSwan] many to one scenario

Kalezwar Hallikerimath kalez618 at gmail.com
Mon Nov 14 14:10:57 CET 2016


I have two 32 bit Ubuntu running on VMware on a windows 7 host. I followed
the steps given in
IPSEC VPN on Ubuntu 15.04 with StrongSwan
​ (​https://raymii.org/s/tutorials/IPSEC_vpn_with_Ubuntu_15.04.html ) to
install Strongswan.
I need help with a scenario which is a little similiar to issue:1518 (
https://wiki.strongswan.org/issues/1518);
that is, I want to have IPsec tunnels from
multiple
​IPs ​each
to be established from Ubuntu
​2(client)
 to a single IP on Ubuntu
​1(server),​
​ ( like : many to one ; tunnels to a concentrator ). Is this possible? If
so, please help me.
My ipsec.conf are attached.​
​Ubuntu 1 (SERVER): 192.168.157.131
​Ubuntu 2 (SERVER): 192.168.157.132
Thank You

​

*KALESH*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20161114/f3b595eb/attachment.html>
-------------- next part --------------
​#CLIENT SIDE (multiple IPs)
config setup
	cachecrls=no
        strictcrlpolicy=ifuri
        uniqueids=keep
conn %default
        reauth=no
        rekey=no
        dpdaction=none
        mobike=no
        keyingtries=%forever
        keyexchange=ikev2
	esp=aes-sha1!
        auto=start
conn 0_192_168_157_132
		# -- Local --
		left=192.168.157.132
		leftauth=psk
		leftsourceip=%config
		# -- Peer --
		right=192.168.157.131
		rightauth=psk
		auto=start
conn 0_192_168_157_133XXXXXX
		# -- Local --
		left=192.168.157.133
		leftauth=psk
		leftsourceip=%config
		# -- Peer --
		right=192.168.157.131
		rightauth=psk
		auto=start

conn 0_192_168_157_2
		# -- Local --
		left=192.168.157.2
		leftauth=psk
		leftsourceip=%config
		# -- Peer --
		right=192.168.157.131
		rightauth=psk
		auto=start
conn 0_192_168_157_3
		# -- Local --
		left=192.168.157.3
		leftauth=psk
		leftsourceip=%config
		# -- Peer --
		right=192.168.157.131
		rightauth=psk
		auto=start
-------------- next part --------------
# SERVER SIDE
config setup
	# strictcrlpolicy=yes
	# uniqueids = no
conn %default
	reauth = no
	rekey = no
	dpdaction = none
	keyingtries = %forever
	keyexchange = ikev2
	ike = modp2048
	esp = aes-sha1!
	mobike = no 
	auto = add
conn new_connection_1
	left = 192.168.157.131
	leftauth = psk
	#right = 192.168.157.132
	right = %any
	rightauth = psk


More information about the Users mailing list