Hi Bas, > My question now is to which interface should I attach 172.16.48.17?
It doesn't really matter. If you don't actually suffer from #197 [1], i.e. if you use strongSwan 5.0.1 or newer, you can add it to `lo`. Adding it to eth0 does work too, that's what strongSwan does by default when it installs virtual IPs it gets assigned dynamically from other peers [2]. Routers on the Internet won't route packets with that destination address to your host so it doesn't make much of a difference if you install it on an interface connected to it or not. Regards, Tobias [1] https://wiki.strongswan.org/issues/197 [2] https://wiki.strongswan.org/projects/strongswan/wiki/VirtualIp _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
