mirror of
https://github.com/strongswan/strongswan.git
synced 2025-10-04 00:00:14 -04:00
e1ff1eefcf
The manager will allow charon-nm to create XFRM interfaces if supported by the kernel instead of creating an unused dummy TUN interface. The xfrmi tool is mostly obsolete nowadays as iproute2 supports creating XFRM interfaces since 5.1.0 (2019-05). Older Debians don't ship that and early versions didn't list the interface IDs. So there might still be some uses for this tool.
19 lines
544 B
Bash
Executable File
19 lines
544 B
Bash
Executable File
#!/bin/bash
|
|
|
|
IF_NAME="xfrmi-${PLUTO_IF_ID_IN}"
|
|
|
|
case "${PLUTO_VERB}" in
|
|
up-client)
|
|
ip link add "${IF_NAME}" type xfrm if_id "${PLUTO_IF_ID_IN}" dev eth0
|
|
ip link set "${IF_NAME}" up
|
|
ip route add 10.1.0.0/16 dev "${IF_NAME}"
|
|
iptables -A FORWARD -i "${IF_NAME}" -j ACCEPT
|
|
iptables -A FORWARD -o "${IF_NAME}" -j ACCEPT
|
|
;;
|
|
down-client)
|
|
iptables -D FORWARD -i "${IF_NAME}" -j ACCEPT
|
|
iptables -D FORWARD -o "${IF_NAME}" -j ACCEPT
|
|
ip link del "${IF_NAME}"
|
|
;;
|
|
esac
|