Re: [strongSwan] Restricting access to list of subnets

Hi Graham, [ Strongswan is also using the list of allowed subnets to set up ip xfrm policies. I'm not sure if I want these or understand them, but I'll leave them be until I learn more about xfrm. ] Based on the older IPsec standards (RFC2401), the Linux kernel does not support (multiple)

[strongSwan] Does strongswan always delete routes ?

Martin, Andreas, We're in the process of opting out of strongSwan managing routes when setting up and tearing down tunnels (by setting strongswan.conf's charon.install_routes option to 'no'). However, although strongswan is no longer installing the routes, whenever the tunnel goes down it looks

[strongSwan] Some possible strongSwan bugs

Hello all, I have been running strongSwan for a while on some of my networks and have been having a few stability issues. I am working on getting to root cause on a few of them and was wondering if other people are having these issues: 1.) DPD'd connections with dpaction=restart sometimes stop