strongSwan

Hello,

I use strongSwan 5.0.0 compiled from source on Debian 6. In my configuration i need to allow multiple connections with same ip and same login/password. But, in default strongSwan configuration it doesn't accept multiple connections with same credentials (login/password), thru it normally support connections with same ip and different login/password.

I find a simple way to allow connections with same ip and same login/password:

In file strongswan-5.0.0/src/libcharon/sa/ikev1/tasks/main_mode.c i commented out this block of code:

@else if (type INITIAL_CONTACT_IKEV1) {
if (!this->initiator && this->state MM_AUTH) {
/* If authenticated and received INITIAL_CONTACT, * delete any existing IKE_SAs with that peer. * The delete takes place when the SA is checked in due * to other id not known until the 3rd message.*/
//static int same_login_counter = 0;
//if (same_login_counter > 2)
// this->ike_sa->set_condition(this->ike_sa, COND_INIT_CONTACT_SEEN, TRUE);
//else
// same_login_counter++;
}
}@

This is fast and not elegant way to fix this. I understand that you can find another way, but it will be great, if you include come options for strongSwan to:

1. Allow connections from same ip and same login/password.
2. Options to limit number of incoming connections with same login/password (for exmample allow only 5 connections with same login/pass).