Hi, I'm using IOS devices (ikev1) and split tunneling via the Unity extensions (split-include)
I'd like to be able to give a different split config to a user depending on some criteria (e.g. per-user config or a flag in a radius database or such like). However, at the moment it seems like Unity split tunnel config is a global setting in strongswan. Is there any specific architecture reason it needs to be this way or is it just a current limitation? Can anyone suggest/recommend any viable route to making a per-user split-tunnel configuration? (Incidentally, I did just read that IOS 8 may support ikev2. Does anyone know anything about this?. Would this mean the normal leftsubnet route would work rather than having to use Unity?). Thanks. RD _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
