[strongSwan] Export XFRM StrongSwan / IPSec routes to Quagga (OSPF)
tomkcpr at mdevsys.com
Mon Oct 26 00:58:18 CET 2020
That's certainly an option I've reviewed. Whatever the option, would
like to keep customization to nothing, if possible.
On 10/25/2020 3:03 PM, Volodymyr Litovka wrote:
> if it's option, you can consider Bird, which can import from specified
> table - https://bird.network.cz/?get_doc&v=20&f=bird-6.html#ss6.6 :
> |kernel table /number/|
> Select which kernel table should this particular instance of the
> Kernel protocol work with. Available only on systems supporting
> multiple routing tables.
> On 25.10.2020 20:05, TomK wrote:
>> Hey All,
>> I'm interested in finding out how to import routes from StrongSwan
>> IPSec installed XFRM tables (220) into Quagga (OSPF, 254)?
>> The XFRM policy based rules are saved in table 220 while Quagga
>> (OSPF) saves the routes in table 254. I have an IPSec StrongSwan
>> on-prem GW paired up with one of the Cloud providers. The connection
>> is established fine however I can't ping the remote VLAN's from any
>> other device on the on-prem network except from the on-prem GW itself.
>> I would like to make OSPF aware of table 220 so it can import the
>> rules. Or at least find another way to export the rules in table 220
>> and into table 254. Either import from or export to would work but I
>> haven't been able to find articles on the web addressing this issue.
>> Is this possible?
> Volodymyr Litovka
> "Vision without Execution is Hallucination." -- Thomas Edison
-------------- next part --------------
An HTML attachment was scrubbed...
More information about the Users