[strongSwan] initiate from both sides

[Noel Kuntze]

Hi,

strongSwan doesn't handle that well as of now.
It might change in the future at some point.

Kind regards

Noel

Am 13.11.20 um 09:08 schrieb Christoph Harder:
> Hello everyone,
> 
> I'm using Strongswan on FreeBSD and wanted to ask if it is possible to have a tunnel initiated by both sides?
> Currently I have one side witch uses start/restart/start for the start/dpd/stop actions and one side that uses trap/trap/trap.
> However since I have dynamic ips on both sides, I'm relying on dynamic dns to find the other host. But propagation of the new address takes a while, which results in delays after the ip of the responder changes.
> If both sides would be initiating/reinitiating the tunnels, the problem would be solved because if one side can't initiate the tunnel, due to dns propagation delays the other side would be able to connect. (Well, unless both sides get new ips at the same time.)
> Is this kond of configuration supported?
> 
> Best regards,
> Christoph
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.strongswan.org/pipermail/users/attachments/20201118/9d834f7e/attachment.sig>