From our team's experience so far, we have found out that if you want to connect to an IPSec VPN it does not automatically advertise the route to the client and it has to be done manually in the client.
Is this a bug, missing configuration or a feature? (in terms that automated routing configuration could be a security issue so it's normal to do that manually).
The vendor which uses StrongSwan for a VPR (virtual private router) has told us that the VPR would not advertise the route. I am trying to understand how much is that relatable to StrongSwan itself.
Used clients: * Windows 10 Pro * Ubuntu Linux 18.04.3 LTS
Without a routing entry like the following you can't communicate to a virtual machine behind the VPN. As this entry is doe, things work fine.
route add 10.225.24.0/24 172.26.96.1
Where:
- 172.26.96.1 is the ppp0's gateway (client IP is here for example 172.26.96.2)
- 10.225.24.0/24 is the private network we want connect to