[Swan] multiple child SA
paul at nohats.ca
Wed Aug 12 01:29:50 UTC 2020
On Mon, 10 Aug 2020, Mehboob Ansari wrote:
> I am doing some ipsec related configuration via libreswan and got stuck on one scenario.
> Can you please guide me how i can make 2 or more IPSEC CHILD SA which sharing one IKE SA.
> means : I need IKE SA: total 1)
> and IPSEC SA : total(2)
You can either just add multiple connections and libreswan will
automatically figure out when it can share the IKE SA, or you
can use subnets (plural) instead of subnet (singular) to cover
Note that this will setup all combinations, so 4 tunnels.
More information about the Swan