On 21.09.22 13:47, Tobias Brunner wrote:
Hi Harri,

is there some way to express

    if peercert->OU == develop
        pool = pool1
    else
        pool = pool2


You can match identities with wildcards, see [1].

Regards,
Tobias

[1] https://www.strongswan.org/testing/testresults/ikev2/wildcards/


That is cool. I didn't know that.

If both connections in the config match, which one is chosen? First one? Most specific (where OU matches)?



Mit freundlichen Grüßen,

--

[*] sys4 AG
https://sys4.de, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein

Reply via email to