Is it possible to proto/port limit ipsec [transport mode] through the web GUI?



  • I haven't been able to find a way to do it, but I'd like to set up an ipsec transport for a particular remote host, protocol and port combination, leaving all other traffic alone.

    It looks like strongswan may support the syntax directly in ipsec.conf, but I can't find a way to do it via. the GUI. Is this an oversight on my part, is it a new feature request, or am I misunderstanding the strongswan examples?:

    leftsubnet = <ip subnet="">[[<proto port="">]][,…]
    leftsubnet=10.0.0.1[tcp/http]
    leftsubnet=10.0.0.2[icmp/%any]

    Thanks!</proto></ip>



  • It will come for 2.3 for sure.



  • Hi,

    I'm not sure about open a new topic for this feature.
    Is it already implemented? Could it be achieved with any rule?

    Regards.


Log in to reply