[strongSwan] remote_ts to catch in 'updown' - how?

Tobias Brunner tobias at strongswan.org
Wed Jun 24 11:29:41 CEST 2020


> Would you know how to catch the following in updown script
> variables?
>         remote_ts = ","
> With 'PLUTO_PEER_CLIENT' I get only the latter IP/net.

If you actually have a CHILD_SA negotiated with both remote subnets,
then the script will be called multiple times, each time that variable
contains a different remote subnet (the script is called for each
combination of local and remote traffic selectors).  If you want one
event per CHILD_SA, then use vici's child-updown event, which receives
the traffic selectors as lists.


More information about the Users mailing list