[strongSwan] remote_addrs with more than one IP address

Vijaya Venkatachalam vijaya.venkatachalam at gmail.com
Fri Apr 28 15:14:30 CEST 2017


Thanks Andreas.

On Thu, Apr 27, 2017 at 3:54 PM, Andreas Steffen <
andreas.steffen at strongswan.org> wrote:

> Hi Vijaya,
>
> the functionality of multiple remote addresses, address ranges or
> address subnets is rather intended for use by the responder,
> allowing to restrict the hosts that are allowed to connect.
>
> Regards
>
> Andreas
>
> On 27.04.2017 13:20, Vijaya Venkatachalam wrote:
> > hi,
> >
> > I am using VICI strongswan interface to build an application to start an
> > IPsec connection.
> > Now in my configuration, I have specified two IP addresses in
> remote_addrs.
> > But when I initiate the connection, it only establishes connection with
> > the first IP address.
> > And if no ipsec is running on the first IP address, it does not fallback
> > on the second IP address.
> >
> > Does this mean currently there is no support for failover to the one or
> > more IP addresses specified in the remote_addrs list??
> >
> > can you pls clarify this.
> >
> > cheers,
> > vijaya
>
> ======================================================================
> Andreas Steffen                         andreas.steffen at strongswan.org
> strongSwan - the Open Source VPN Solution!          www.strongswan.org
> Institute for Networked Solutions
> HSR University of Applied Sciences Rapperswil
> CH-8640 Rapperswil (Switzerland)
> ===========================================================[INS-HSR]==
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170428/c22f4ff2/attachment.html>


More information about the Users mailing list