strongSwan

Thanks Brunner for your quick input.

is the below usage is correct ?

vici_add_key_valuef(req,"mediation","%s","yes");

vici_add_key_valuef(req,"mediated_by","%s","medi_conn");

vici_add_key_valuef(req,"mediation_peer", "%s", "medi@strongwan.org");

is the below usage is correct ?

vici_add_key_valuef(req,"mediation","%s","yes");

vici_add_key_valuef(req,"mediated_by","%s","medi_conn");

vici_add_key_valuef(req,"mediation_peer", "%s", "medi@strongwan.org");

Depends on the rest of the code, but looks about right (and you don't have to use "%s" for static texts, you could just write them directly). Just note that the first option is used for mediation connections and the other two for mediated connections.

Thanks Brunner, I will modify accordingly.

Hi,

For initiating the tunnel using the initiate command it expects "childname" , for mediation tunnel childname will not be present , so how should we invoke the initiate command in this case.

swanctl --initiate --child <name> --ike <name>

Thanks

For initiating the tunnel using the initiate command it expects "childname" , for mediation tunnel childname will not be present , so how should we invoke the initiate command in this case.

You don't really have to do that manually, the mediation connection is started automatically when a mediated connection requires it.

And if you really wanted to initiate the mediation connection you can just define an empty child section and then initiate that.

Yes, it is starting the automatically. Thanks for the input