Use the left/rightsourceip - but only relevant at the local end.

On 16/08/2018 13:43, Bruno de Paula Larini wrote:

Hi list!

What would be the correct way to make Libreswan host connections go through the tunnel (considering it isn't its own default gateway, of course)?
I'm using Libreswan 3.25.

So far I was using this: ip route add <remote_network> via <own_lan_gateway_ip> dev eth0 Also added it in /etc/sysconfig/network-scripts/route-eth0 (it's a Fedora 27, kernel 4.17 by the way).

However I noticed that everytime I stop the Libreswan daemon, the static routes that match the rightsubnets are flushed too. This doesn't happen on my CentOS 7.4 gateway (kernel 4.1), with Libreswan 3.20.
Right after a reboot, they also aren't present either.
I always use 'systemctl' to do so. Running only '/usr/libexec/ipsec/whack --shutdown' also removes them.

Would this be a new expected behaviour? If yes, what would be an alternative so the localhost connections can also go through the tunnel?

Thanks!
_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

_______________________________________________
Swan mailing list
[email protected]
https://lists.libreswan.org/mailman/listinfo/swan

Reply via email to