Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Is it possible to proto/port limit ipsec [transport mode] through the web GUI?

    Scheduled Pinned Locked Moved IPsec
    3 Posts 3 Posters 884 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • E
      eroper
      last edited by

      I haven't been able to find a way to do it, but I'd like to set up an ipsec transport for a particular remote host, protocol and port combination, leaving all other traffic alone.

      It looks like strongswan may support the syntax directly in ipsec.conf, but I can't find a way to do it via. the GUI. Is this an oversight on my part, is it a new feature request, or am I misunderstanding the strongswan examples?:

      leftsubnet = <ip subnet="">[[<proto port="">]][,…]
      leftsubnet=10.0.0.1[tcp/http]
      leftsubnet=10.0.0.2[icmp/%any]

      Thanks!</proto></ip>

      1 Reply Last reply Reply Quote 0
      • E
        eri--
        last edited by

        It will come for 2.3 for sure.

        1 Reply Last reply Reply Quote 0
        • D
          dayer
          last edited by

          Hi,

          I'm not sure about open a new topic for this feature.
          Is it already implemented? Could it be achieved with any rule?

          Regards.

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.