<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class="">
I’m trying to setup multiple IPSec VTIs between two peers, but I haven’t been able to have both connections up at the same time.
<div class=""><br class="">
</div>
<div class="">I have two linux boxes on my local network that I’m trying to configure to connect to a single AWS instance. The route-based VPN </div>
<div class="">functionality works great when there is only one tunnel present, but fails where there is two. Of note, the negotiation succeeds,</div>
<div class="">however, I’m only able to ping across one of the tunnels.</div>
<div class=""><br class="">
</div>
<div class="">A visualization of the scenario is such:</div>
<div class=""><br class="">
</div>
<div class="">1.2.3.4</div>
<div class="">HOST 1 <———\</div>
<div class=""><span class="Apple-tab-span" style="white-space: pre;"></span> \———\</div>
<div class=""><span class="Apple-tab-span" style="white-space: pre;"></span> \———\</div>
<div class=""><span class="Apple-tab-span" style="white-space: pre;"></span> \———> 5.6.7.8</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span> AWS Instance</div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span> /———> </div>
<div class=""><span class="Apple-tab-span" style="white-space:pre"></span> /———/</div>
<div class="">1.2.3.4<span class="Apple-tab-span" style="white-space:pre"> </span>
/———/</div>
<div class="">HOST 2 <———/</div>
<div class=""><br class="">
</div>
<div class="">where the public IP address of my network is 1.2.3.4 and the public IP address of the AWS instance is 5.6.7.8. The two hosts on my local network have</div>
<div class="">unique private IP addresses on the same subnet. The AWS instance has a single private IP address.</div>
<div class=""><br class="">
</div>
<div class="">I’ve played around with a handful of configuration options to no avail. ‘vti-shared=yes’ doesn’t give me the functionality I need — I want unique tunnels</div>
<div class="">for each connection.</div>
<div class=""><br class="">
</div>
<div class="">I know OpenVPN allows this, but I’m wondering if such a configuration is possible with Libreswan. Let me know if this is currently not supported, if</div>
<div class="">you think it might be and need more information, or if there is some configuration trick you’ve found successful in accomplishing something similar.</div>
<div class=""><br class="">
</div>
<div class="">Thanks!</div>
<div class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
--</div>
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
cm</div>
</div>
<br class="">
</body>
</html>