Re: [strongSwan] Possible to broadcast packets down each IPsec tunnel from the SeGW ?

2011-11-29 Thread Graham Hudspith
Hi Iris, The way I solved this in the end was to write my own program that created a raw UDP socket. I wanted this socket to be able to send broadcast packets, so I set the SO_BROADCAST option. I also wanted complete control over specifying the IP header as well as the UDP contents, so I set the

Re: [strongSwan] Possible to broadcast packets down each IPsec tunnel from the SeGW ?

2011-11-24 Thread Iris Su
Hi Martin, I'm interested in this topics (broadcast packets down each IPSec tunnel) as well. However, I still have some problem about this solution. Below is my understanding based on Graham's example. our strongSwan-based SeGW defines a conn config entry in ipsec.conf where IPsec tunnels

Re: [strongSwan] Possible to broadcast packets down each IPsec tunnel from the SeGW ?

2011-11-01 Thread Martin Willi
Hi Graham, Is it possible to send a packet to a subnet's broadcast address on the secure side of a SeGW and have the packet sent down each IPsec tunnel whose inner IP address belongs to that subnet ? It's not trivial, but it can be done. You'll need to: * include the broadcast address