Hi again I forgot to mention some information about the environment: strongSwan: 4.3.5 with IKE1 (pluto) OS: Gentoo Linux Kernel: 2.6.29.2 (vanilla)
I need the setup for reduntant vpn connections. Over the transport connections I configure GRE tunnels with OSPF based routing. Currently I use two WAN IP Adresses for each link, but it would be much easier, if I could setup the connections with only one IP per link. Best regards Elmar > -----Original Message----- > From: users-boun...@lists.strongswan.org > [mailto:users-boun...@lists.strongswan.org] On Behalf Of > Vonlanthen, Elmar > Sent: Monday, January 18, 2010 2:32 PM > To: users@lists.strongswan.org > Subject: [strongSwan] Reduntant connections > > Hello all > > I would like to setup the following connections: > > conn gateway2_a > left=1.0.10.1 (local wan_a) > leftnexthop=1.0.10.254 > right=1.0.20.1 (remote wan_a) > authby=secret > type=transport > auto=start > > conn gateway2_a > left=1.0.10.1 (local wan_a) > leftnexthop=1.0.10.254 > right=1.0.30.1 (remote wan_b) > authby=secret > type=transport > auto=start > > +- wan_a -+ > gateway1 - wan_a -- Internet --+ +-- gateway2 > +- wan_b -+ > > According to the following post, this should be possible, if > I don't use > the option "leftsourcip". > > https://lists.strongswan.org/pipermail/users/2006-October/001564.html > > But unfortunately, I still get an error message: cannot route -- route > already in use for "gateway2_a" > > What am I doing wrong? > > Thanks for any help. > > Best regards > Elmar >
smime.p7s
Description: S/MIME cryptographic signature
_______________________________________________ Users mailing list Users@lists.strongswan.org https://lists.strongswan.org/mailman/listinfo/users
