Hi,
Looked in more details the logs now. Somehow it seems that strongSwan
is negotiating but not able to successfully to establish IPsec SA
between the spokes.
Can you set strongSwan in debug mode, and get the logs from it as well
when trying to establish the shortcut tunnel? This could be someth
Hi,
I just realized the other spoke's IP arrives as BGP route. I think this
is not right.
The way it should work is that if there's multiple Hubs they will
exchange full Spoke route database with BGP, but Hubs should not
announce those to Spokes - I suspect this is a side effect of that.
The con
Hi,
On Mon, 16 Oct 2017 13:53:47 -0400
Lee Cardona wrote:
> Hi Timo et al,
>
> I'm having a problem with shortcuts not installing with
> ubuntu/strongswan/Frr.
>
> Setup is as follows:
>
> 1 hub 2 spokes (single machine lab setup with lxc)
>
> strongswan loads dmvpn conns ok
> both spokes re
Hi Timo et al,
I'm having a problem with shortcuts not installing with
ubuntu/strongswan/Frr.
Setup is as follows:
1 hub 2 spokes (single machine lab setup with lxc)
strongswan loads dmvpn conns ok
both spokes register fine
Hub has [N] routes back to spokes
Spokes have single [N] route back to