From: Martin Willi Date: Mon, 6 May 2013 15:04:36 +0000 (+0200) Subject: Merge branch 'tun-vip' X-Git-Tag: 5.1.0dr1~153 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a8849e0713d3ae0f377f0b0e8c8fb83803d4eed4;p=thirdparty%2Fstrongswan.git Merge branch 'tun-vip' Beside some OS X love, this merge introduces virtual IP and route installation support on the pfkey/pfroute kernel interfaces. Each virtual IP gets installed on a dedicated TUN device. As Linux-like source routes are not supported, routes for the negotiated traffic selectors get installed using the TUN device. To prevent IKE packets from using those routes, special exclude routes get installed to the IKE gateway. This works for most road-warrior deployments, but certainly does not for some more exotic configurations, such as those using virtual-IP-to-host. Mobility is not yet supported, either. --- a8849e0713d3ae0f377f0b0e8c8fb83803d4eed4