Discussion:
[strongSwan-dev] can strongswan monitor multiple interfaces for sending IKE packets out
Ravi Kanth Vanapalli
2016-11-10 13:00:12 UTC
Permalink
I am having multiple interfaces on my device.All with active internet
connection. We have the possibility of using source routing to route the
packets over any interface. Default route is also present

In this context I have two questions.
1) When routing packets towards the ipsec gateway, how does strongswan
determine which interface to use as outgoing interface.
2) Is there an option to specify that strongswan use a particular interface
for sending out the IKE packets ?
3) Is there an option for strongswan to monitor multiple interfaces and use
a prefered interface for routing IKE packets out.

Thank you for your input.
--
Regards,
RaviKanth VN Vanapalli
Ravi Kanth Vanapalli
2016-11-10 14:48:37 UTC
Permalink
In this current scenario, we are using libipsec module and not kernel
libipsec.
Also MOBIKE is enabled.

Thanks,
Ravikanth

On Thu, Nov 10, 2016 at 8:00 AM, Ravi Kanth Vanapalli <
Post by Ravi Kanth Vanapalli
I am having multiple interfaces on my device.All with active internet
connection. We have the possibility of using source routing to route the
packets over any interface. Default route is also present
In this context I have two questions.
1) When routing packets towards the ipsec gateway, how does strongswan
determine which interface to use as outgoing interface.
2) Is there an option to specify that strongswan use a particular
interface for sending out the IKE packets ?
3) Is there an option for strongswan to monitor multiple interfaces and
use a prefered interface for routing IKE packets out.
Thank you for your input.
--
Regards,
RaviKanth VN Vanapalli
Loading...