[strongSwan] MOBIKE + VTI

Prashanth Venugopal pvenugopal at vmware.com
Thu Nov 30 19:44:13 CET 2017


I am wondering if we could use the “listen” API provided in vici to get notified for “UPDATE_SA_ADDRESSES” events. But I am not sure what is the exact event type to register for.

Any help would be appreciated.


From: Users <users-bounces at lists.strongswan.org> on behalf of Prashanth Venugopal <pvenugopal at vmware.com>
Date: Thursday, November 30, 2017 at 1:18 AM
To: "users at lists.strongswan.org" <users at lists.strongswan.org>
Subject: [strongSwan] MOBIKE + VTI


We have a use case where we need to support MOBIKE with VTI interfaces. S
Our Current solution involves using strongswan to provide the IKE protocol communication, but we disable route installs in Charon and add routes through our application code to point it to the appropriate VTI interfaces.

We want to do something similar for mobile clients (that use MOBIKE) but we would also like to cover the “UPDATE_SA_ADDRESSES” notification cases. In short, we would like to somehow figure out in our application (which uses the vici plugin to talk to strongswan) when an “UPDATE_SA_ADDRESSES” is received so that we can point the routes to a new/different vti interface.

I do see that strong swan does the path switching when it is taking care of routing, but is there a notification that the application could register for to catch this event and react appropriately with vti interfaces ?
Would the SA get deleted and re-created when this happens ?


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20171130/2728dd6f/attachment-0001.html>

More information about the Users mailing list