[Openswan Users] OPENSWAN Problems with hostname resolves mutiple ips

Paul Wouters paul at xelerance.com
Sat Mar 14 13:19:07 EDT 2009

On Thu, 12 Mar 2009, Indira wrote:

>     I am using OPENSWAN 2.4.5 with kernel. In my ipsec.conf right is host name. I am facing issue when host name resolves to more than one
> IP. There is a no issue if host name resolves to single IP. So I want know whether OPENSWAN support with multiple IP for same host name. If so
> connection establish in which IP. Please reply me.

Openswan does not care which IP it connects to, as long as the other end
authenticates properly. This is pretty easy with raw RSA and X.509 based
auth, but if you are using PSK based auth, then it is tricky due to it
being based on the IP address.


More information about the Users mailing list