[strongSwan] executing updown script when IKE is created and deleted

Nimo gnimozyu at gmail.com
Mon Aug 21 12:22:37 CEST 2017


Hi Tobias,

Thank you very much !
---
takumi kadode

2017-08-18 17:40 GMT+09:00 Tobias Brunner <tobias at strongswan.org>:

> Hi,
>
> > Is there anything way to execute external script when IKE is created and
> > deleted ?
>
> The updown script is/was intended to install firewall rules that go with
> the IPsec SAs so the script is tied to the lifecycle of CHILD_SAs (but
> is not called when CHILD_SAs are rekeyed as the original information
> usually doesn't change).
>
> For more options, have a look at the events exposed via VICI [1] (look
> for "Server-issued events" in README.md), or write a custom plugin.
>
> Regards,
> Tobias
>
> [1] https://wiki.strongswan.org/projects/strongswan/wiki/Vici
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20170821/bbeb54f9/attachment.html>


More information about the Users mailing list