security/strongswan start=route issue

abi abi at abinet.ru
Fri Aug 26 13:54:50 UTC 2016


Strange indeed. Yes, I ping correctly and auto=start works flawless.

Is OPNsense tracking 10 branch? I'm on 11-RC1


On 26.08.16 10:05, Franco Fichtner wrote:
> Hi,
>
>> On 26 Aug 2016, at 9:00 AM, abi <abi at abinet.ru> wrote:
>>
>> I'd like to open PR on upstream, but I want be sure that the problem exists not only for me, as the problem looks strange.
>> The issue is that tunnel behaves different if it autostarts (auto=start) and when it starts when traffic registered between left and right side. (auto=route).
> This works fine in our OPNsense setups.
>
> Make sure you use ping with the option "-S $LEFT_IP", it will
> only auto-route local traffic that originates from within your
> leftsubnet.
>
>
> Cheers,
> Franco



More information about the freebsd-ports mailing list