[strongSwan] Avoiding adding IP to loopback interface

Simon T smith.not.western at gmail.com
Thu Oct 4 08:59:36 CEST 2018


Hi Tobias,

Thanks for the sanity check. I've investigated further and you are
correct it was a third party program doing this! All working now.

Regards,

Simon
On Wed, Oct 3, 2018 at 4:28 PM Tobias Brunner <tobias at strongswan.org> wrote:
>
> Hi Simon,
>
> > Strongswan (well, I'm pretty sure it's Strongswan) adds a /32 IP to my
> > loopback interface when bringing up the connection.
>
> I don't think it is.  strongSwan only adds virtual IPs (assigned from
> the other peer, and since you don't request one with leftsourceip, there
> won't be any) to local interfaces, and to `lo` only if explicitly
> configured to do so (via charon.install_virtual_ip_on).  There will also
> be a log message if an IP address is installed.
>
> Regards,
> Tobias


More information about the Users mailing list