[Openswan Users] OPENSWAN Problems with hostname resolves mutiple ips

[Paul Wouters]

On Thu, 12 Mar 2009, Indira wrote:

>     I am using OPENSWAN 2.4.5 with 2.6.23.5 kernel. In my ipsec.conf right is host name. I am facing issue when host name resolves to more than one
> IP. There is a no issue if host name resolves to single IP. So I want know whether OPENSWAN support with multiple IP for same host name. If so
> connection establish in which IP. Please reply me.

Openswan does not care which IP it connects to, as long as the other end
authenticates properly. This is pretty easy with raw RSA and X.509 based
auth, but if you are using PSK based auth, then it is tricky due to it
being based on the IP address.

Paul