Stongswan and Libreswan in Centos

Question

I have a server running stongswan with one VPN connection.

Can I add another VPN connection Via Libreswan on the same server?

So the server will run both Strongswan and Libreswan.

Regards, Michael

What's the reason you want to mix IKE implementations? – ecdsa Jul 21 '20 at 13:35 — ecdsa, Jul 21 '20 at 13:35
No, but you can have Strongswan handle both connections. – Michael Hampton Jul 21 '20 at 15:33 — Michael Hampton, Jul 21 '20 at 15:33

score 1 · Answer 1 · answered Jul 21 '20 at 13:34

Generally not. First, IKE uses fixed UDP ports (500/4500) that both IKE daemons will want to bind their sockets to. Second, both IKE daemons will assume full control over the kernel's IPsec stack so there is a high chance for conflicts (e.g. duplicate reqids or policies).

You might be able to work around those issues (e.g. assign different ports, use static reqids, use network namespaces, or even use strongSwan's userland IPsec implementation), but you can probably avoid some headaches by sticking to one IKE implementation.

Stongswan and Libreswan in Centos

1 Answers1