thanks for your response.I install strongswan on centos7.2, does it can't support kernel-ipsec?I run'./configure ..... --enable-kernel-ipsec' it shown warning, can't find kernel-ipsec, how can i do?
| | 陆晓萍 邮箱：[email protected] | 签名由 网易邮箱大师 定制 在2018年05月25日 20:03，Tobias Brunner 写道： Hi, > I configured a ikev2 , net-to-net, psk, i can use "ipsec up" command > to establish tunnel, but it can't established by a coming traffic, of > course, the ttraffic can match the rule. The kernel-libipsec plugin does currently not support trap policies. So disable that plugin and use the kernel's IPsec stack instead (via kernel-netlink plugin). Regards, Tobias
