strongSwan is an automatic keying daemon and does not care about manually configured SPs and SAs as long as they do not conflict with its own policies and associations. It seems to me that the strongSwan mailing list is not the right forum for your questions.
Best regards Andreas Jianqing Zhang wrote: > When I configure SP and SA manually for an outgoing packet, must the > source IP in SA be the sender (local host)'s IP? Will strongSwan or > native IPsec module check the consistence? > > Thanks ====================================================================== Andreas Steffen andreas.stef...@strongswan.org strongSwan - the Linux VPN Solution! www.strongswan.org Institute for Internet Technologies and Applications University of Applied Sciences Rapperswil CH-8640 Rapperswil (Switzerland) ===========================================================[ITA-HSR]== _______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users
