[strongSwan] Export XFRM StrongSwan / IPSec routes to Quagga (OSPF)

TomK tomkcpr at mdevsys.com
Sun Oct 25 19:05:57 CET 2020


Hey All,

I'm interested in finding out how to import routes from StrongSwan IPSec 
installed XFRM tables (220) into Quagga (OSPF, 254)?

The XFRM policy based rules are saved in table 220 while Quagga (OSPF) 
saves the routes in table 254.  I have an IPSec StrongSwan on-prem GW 
paired up with one of the Cloud providers.  The connection is 
established fine however I can't ping the remote VLAN's from any other 
device on the on-prem network except from the on-prem GW itself.

I would like to make OSPF aware of table 220 so it can import the rules. 
  Or at least find another way to export the rules in table 220 and into 
table 254.  Either import from or export to would work but I haven't 
been able to find articles on the web addressing this issue.

Is this possible?

-- 
Thx,
TK.


More information about the Users mailing list