[Swan] VTI for Multiple Site-to-Site VPNs
paul at nohats.ca
Wed Aug 28 22:24:32 UTC 2019
On Thu, 29 Aug 2019, Reuben Farrelly wrote:
> But things have gone wrong when I've attempted to add more VTI sessions to
> the libreswan side.
> Configs look like this:
> conn router-2.reub.net-ipv4
You can only have one right=%any with VTI interfaces. This is a
fundamental limitation of VTI and one of the reasons they are being
obsoleted for XFRMi interfaces. Libreswan should soon support XFRMi.
More information about the Swan