Hi all, I'm wondering if there a way to tell MOBIKE which interfaces it should consider during path discovery. I have a couple of gateways with multiple WAN links, but they also have some GRE tunnels interfaces, and I would like to tell MOBIKE which links to use (or not to use) out of all the available. (Pluto is also running but the connection is defined for ikev2 and mobike)
[r...@gateway1 ~]# ipsec statusall 000 Status of IKEv1 pluto daemon (strongSwan 4.3.5): 000 interface eth0.164/eth0.164 192.168.3.47:4500 000 interface eth0.164/eth0.164 192.168.3.47:500 000 interface lo/lo ::1:500 000 interface lo/lo 127.0.0.1:4500 000 interface lo/lo 127.0.0.1:500 000 interface lo:0/lo:0 192.168.22.206:4500 000 interface lo:0/lo:0 192.168.22.206:500 000 interface br0/br0 172.22.0.1:4500 000 interface br0/br0 172.22.0.1:500 000 interface ppp0/ppp0 10.179.141.133:4500 000 interface ppp0/ppp0 10.179.141.133:500 000 interface tun1/tun1 192.168.40.1:4500 000 interface tun1/tun1 192.168.40.1:500 000 %myid = '%any' 000 loaded plugins: aes des sha1 sha2 md5 random x509 pubkey pkcs1 pgp dnskey pem hmac gmp 000 debug options: none 000 Status of IKEv2 charon daemon (strongSwan 4.3.5): uptime: 2 hours, since Dec 28 13:49:10 2010 worker threads: 1 idle of 8, job queue load: 0, scheduled events: 4 loaded plugins: aes des sha1 sha2 md5 fips-prf random x509 pubkey pkcs1 pgp dnskey pem xcbc hmac gmp kernel-netlink stroke updown attr resolve Listening IP addresses: 172.22.0.1 192.168.3.47 10.179.141.133 192.168.40.1 10.4.0.18 Connections: TO-GATEWAY2: 192.168.3.47...XX.XX.XX.XX, dpddelay=10s TO-GATEWAY2: local: [GATEWAY1] uses pre-shared key authentication TO-GATEWAY2: remote: [XX.XX.XX.XX] uses any authentication TO-GATEWAY2: child: 192.168.22.206/32 === 192.168.4.203/32 , dpdaction=restart Cheers, Alexis
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users