Hi Rachel, > Does Strongswan support IKE v2's CP(CFG_REQUEST) with multiple > INTERNAL_ADDRESS attributes?
Yes. Starting with strongSwan 5.0.1, strongSwan can send multiple addresses. To configure it, define two addresses or explicit/named pools in the ipsec.conf rightsourceip option, separated by comma. A simple example of two explicit pools is: rightsourceip=10.0.1.0/24,10.0.3.0/24 For each connection, the IKE daemon charon will allocate an address from both pools and assign it to the client. man ipsec.conf for more details. Best regards Martin _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
