[Openswan Users] Question regarding the possibility of using multiple ipsecX interfaces

[John Donath]

Hi,

I am working on a solution to supply IPSEC tunnels to multiple customers regardless of there internal networks which of course may overlap.

A possible approach is based on the introduction of multi-routing tables (iproute2) where each customer has is own routing table on the IPSEC box.
To select the proper routing table I need to FWMARK (iptables) packets coming in on certain ipsecX interface.

Now I have two related questions, e.g.:

[1]
How many ipsecX interfaces can be defined (when using KLIPS)?

[2]
Can I have multiple ipsecX interfaces bound to one physical Ethernet interface?

Thanks for your time!

Kind regards,
John Donath


________________________________
Op dit e-mailbericht is een disclaimer van toepassing, welke te vinden is op http://www.espritxb.nl/disclaimer
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.openswan.org/pipermail/users/attachments/20091110/e72b3fa4/attachment.html