Sorry for double mail and html version.

I have heard that with strongSwan IPsec drop policies (similar to passthrough 
policies) it should be possible to configure a kill switch as with OpenVPN.

Passtrough policies: 
https://wiki.strongswan.org/projects/strongswan/wiki/UsableExamples#Passthrough-policy

Is it possible to block everything with IPsec drop policies and allow only 
IPsec IKEv2 traffic?

And how do I configure this for OpenWRT?

My last IPsec IKEv2 settings are here: https://wiki.strongswan.org/issues/3291

Best regards

Bernd

Reply via email to