Issue #2791
Mediation support in vici
Description
Hi Team,
I didn't find any code related to medaiton configuration in this trongswan/src/libcharon/plugins/vici/vici_config.c
Is vici supports mediation configuration handling?
Thanks
History
#1 Updated by Tobias Brunner over 2 years ago
- Status changed from New to Feedback
Is vici supports mediation configuration handling?
Yes, since 5.5.2, refer to swanctl.conf for the options.
#2 Updated by M Thotager over 2 years ago
Thanks Brunner for your quick input.
is the below usage is correct ?
vici_add_key_valuef(req,"mediation","%s","yes");
vici_add_key_valuef(req,"mediated_by","%s","medi_conn");
vici_add_key_valuef(req,"mediation_peer", "%s", "medi@strongwan.org");
#3 Updated by Tobias Brunner over 2 years ago
is the below usage is correct ?
vici_add_key_valuef(req,"mediation","%s","yes");
vici_add_key_valuef(req,"mediated_by","%s","medi_conn");
vici_add_key_valuef(req,"mediation_peer", "%s", "medi@strongwan.org");
Depends on the rest of the code, but looks about right (and you don't have to use "%s" for static texts, you could just write them directly). Just note that the first option is used for mediation connections and the other two for mediated connections.
#4 Updated by M Thotager over 2 years ago
Thanks Brunner, I will modify accordingly.
#5 Updated by M Thotager over 2 years ago
Hi,
For initiating the tunnel using the initiate command it expects "childname" , for mediation tunnel childname will not be present , so how should we invoke the initiate command in this case.
swanctl --initiate --child <name> --ike <name>
Thanks
#6 Updated by Tobias Brunner over 2 years ago
For initiating the tunnel using the initiate command it expects "childname" , for mediation tunnel childname will not be present , so how should we invoke the initiate command in this case.
You don't really have to do that manually, the mediation connection is started automatically when a mediated connection requires it.
And if you really wanted to initiate the mediation connection you can just define an empty child section and then initiate that.
#7 Updated by M Thotager over 2 years ago
Yes, it is starting the automatically. Thanks for the input
#8 Updated by Tobias Brunner over 2 years ago
- Status changed from Feedback to Closed
- Assignee set to Tobias Brunner
- Resolution set to No change required