Hi Rudolf, > Is there a way in strongswan configuration to control this > process?
No, at the moment the virtual IP address is added to the same interface that has the address that is used for IKE. You could change that, though, in ike_sa.c:set_virtual_ip() (and in child_sa.c where it could get reinstalled) or directly in the kernel_netlink_net implementation of kernel_net_t.add_ip(). Regards, Tobias _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
