Hi, > Is there any option available to configure the different proposal for > different IPsec tunnels at the initiator host (in its strongswan.conf > file) and responder host (in its ipsec.conf file)?
With load-tester, you can use the "proposal" and "esp" keywords in strongswan.conf to configure IKE- and ESP-proposals, respectively. These settings apply to all tunnels initiated with load-tester. On the responder, assuming you are using an ipsec.conf based configuration, you can use the "ike" and "esp" keywords in the appropriate connection entries. Here you can append an "!" to the proposal to omit the default proposal appended by default. man ipsec.conf for details. > In addition, is there any means provided by strongswan to > measure the tunnel setup and teardown rate? No, there is currently no automated mechanism for that. Regards Martin _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
