[strongSwan] remote_addrs with more than one IP address

[Andreas Steffen]

Hi Vijaya,

the functionality of multiple remote addresses, address ranges or
address subnets is rather intended for use by the responder,
allowing to restrict the hosts that are allowed to connect.

Regards

Andreas

On 27.04.2017 13:20, Vijaya Venkatachalam wrote:
> hi,
> 
> I am using VICI strongswan interface to build an application to start an
> IPsec connection.
> Now in my configuration, I have specified two IP addresses in remote_addrs.
> But when I initiate the connection, it only establishes connection with
> the first IP address.
> And if no ipsec is running on the first IP address, it does not fallback
> on the second IP address.
> 
> Does this mean currently there is no support for failover to the one or
> more IP addresses specified in the remote_addrs list??
> 
> can you pls clarify this.
> 
> cheers,
> vijaya

======================================================================
Andreas Steffen                         andreas.steffen at strongswan.org
strongSwan - the Open Source VPN Solution!          www.strongswan.org
Institute for Networked Solutions
HSR University of Applied Sciences Rapperswil
CH-8640 Rapperswil (Switzerland)
===========================================================[INS-HSR]==

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3859 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170427/b006434f/attachment.bin>