Re: bird and ipsec (strongswan) routes

On Tue, Nov 19, 2024 at 09:35:53PM -0800, Brian C. Hill via Bird-users wrote: > Hello, > > I want to use bird to mutually propagate routes throughout several sites > connected with vpn gateways, probably with ospf. > >     e.g. site A net(s) <-> site A vpn gateway <-> vpn 'concentrator' <-> > sit

Re: How to advertise two virtual IPs using BGP?

Then you can differentiate those routes somehow, for example by marking them with a community, and check the community when exporting to kernel to choose the desired ip for prefsrc. On Thu, Nov 21, 2024 at 2:10 AM hans.heng wrote: > Or maybe you want to set the source IP based on some external i

Re: bird and ipsec (strongswan) routes

Hi, I prefer to use XFRM interfaces on Linux. You get an dedicated interface for each site where you can use any static or dynamic (L3- based -- Did you consider to use eBGP between your sites?) routing setup. You can configure it like a VTI while not being a VTI ;-) When using StrongSwan you nee