Otdfbt

Pay as you go Or Oyster card

Is it a problem that pull requests are approved without any comments

Did thousands of women die every year due to illegal abortions before Roe v. Wade?

What is the traditional way of earning a doctorate in Germany?

What is the advantage of carrying a tripod and ND-filters when you could use image stacking instead?

Why is c4 bad when playing the London against a King's Indian?

Avoiding cliches when writing gods

Bent spoke design wheels — feasible?

How do I write "Show, Don't Tell" as an Asperger?

How do photons get into the eyes?

What risks are there when you clear your cookies instead of logging off?

How to make thick Asian sauces?

Credit card offering 0.5 miles for every cent rounded up. Too good to be true?

What happens to foam insulation board after you pour concrete slab?

Smooth switching between 12v batteries, with toggle switch

What happens if you do emergency landing on a US base in middle of the ocean?

What makes linear regression with polynomial features curvy?

Why does the Schrödinger equation work so well for the Hydrogen atom despite the relativistic boundary at the nucleus?

Function to extract float from different price patterns

Incremental Ranges!

Is it possible to trip with natural weapon?

Movie where a boy is transported into the future by an alien spaceship

How to supress loops in a digraph?

How were concentration and extermination camp guards recruited?

Distribute traffic across multiple strongswan IKEv2 connections

iptables NAT/Forwarding with external ADSL router; PCs on the network can't access the internetStrongswan (IKEv2) connection established, but no traffic routingRemote end of IPSec transport is 'permenantly glued' to loopback after some messing around with GREConnect AWS and Azure via OpenVPNRoute traffic through private IP for only certain hosts - CentOS 6.6How to configure dual homed server in order for both network segments to communicate?StrongSwan ikev2 routing through VPN in Windows 10Strongswan IKEv2 for iOS devicesOCSP verification fails in Strongswan (IKEv2)Strongswan IKEv2 REAUTH request

.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;

-1

2

I would like a setup where a strongSwan client connects to multiple endpoints with rightsubnet=0.0.0.0/0.

Then, that machine is used as the default gateway for a few machines.

When I tear up multiple IPsec connections I have a virtual IP on the outbound interface for each connection.

The last one being set as the default in table 220 as in:

default via 192.168.123.1 dev wlp58s0 proto static src 10.6.6.171 table 220

What I would now ideally be able to do, would be:

ip route change default scope global nexthop via 192.168.111.1 dev wlp58s0 src 10.6.6.1 weight 1 nexthop via 192.168.111.1 dev wlp58s0 src 10.6.6.171 weight 1 table 220

However that does not work, the src is not accepted.

How could I achieve that?

iptables ipsec strongswan ikev2 nftables

share|improve this question

edited May 21 at 10:57

Pau Garcia

357

asked May 19 at 20:58

yawniekyawniek

1331110

add a comment | 

-1

2

I would like a setup where a strongSwan client connects to multiple endpoints with rightsubnet=0.0.0.0/0.

Then, that machine is used as the default gateway for a few machines.

When I tear up multiple IPsec connections I have a virtual IP on the outbound interface for each connection.

The last one being set as the default in table 220 as in:

default via 192.168.123.1 dev wlp58s0 proto static src 10.6.6.171 table 220

What I would now ideally be able to do, would be:

ip route change default scope global nexthop via 192.168.111.1 dev wlp58s0 src 10.6.6.1 weight 1 nexthop via 192.168.111.1 dev wlp58s0 src 10.6.6.171 weight 1 table 220

However that does not work, the src is not accepted.

How could I achieve that?

iptables ipsec strongswan ikev2 nftables

share|improve this question

edited May 21 at 10:57

Pau Garcia

357

asked May 19 at 20:58

yawniekyawniek

1331110

add a comment | 

I would like a setup where a strongSwan client connects to multiple endpoints with rightsubnet=0.0.0.0/0.

Then, that machine is used as the default gateway for a few machines.

When I tear up multiple IPsec connections I have a virtual IP on the outbound interface for each connection.

The last one being set as the default in table 220 as in:

default via 192.168.123.1 dev wlp58s0 proto static src 10.6.6.171 table 220

What I would now ideally be able to do, would be:

ip route change default scope global nexthop via 192.168.111.1 dev wlp58s0 src 10.6.6.1 weight 1 nexthop via 192.168.111.1 dev wlp58s0 src 10.6.6.171 weight 1 table 220

However that does not work, the src is not accepted.

How could I achieve that?

iptables ipsec strongswan ikev2 nftables

share|improve this question

edited May 21 at 10:57

Pau Garcia

357

asked May 19 at 20:58

yawniekyawniek

1331110

share|improve this question

edited May 21 at 10:57

Pau Garcia

357

asked May 19 at 20:58

yawniekyawniek

1331110

share|improve this question

edited May 21 at 10:57

Pau Garcia

357

asked May 19 at 20:58

yawniekyawniek

1331110

edited May 21 at 10:57

Pau Garcia

357

edited May 21 at 10:57

Pau Garcia

357

asked May 19 at 20:58

yawniekyawniek

1331110

asked May 19 at 20:58

yawniekyawniek

1331110