strongswan-full 패키지 리빌드 - OpenWRT > 에필로그

기본 패키지에 로컬 서브넷의 패스쓰루, 우회 정책에 필요한 bypass-lan 플러그인이 누락돼 있어서다.

빌드 환경은 Ubuntu 20.04, openwrt-19.07.2 이었다.

git clone -b v19.07.2 https://github.com/openwrt/openwrt.git openwrt-19.07.2

cd ~/openwrt-19.07.2

./scripts/feeds update -a

./scripts/feeds install -a

vi feeds/packages/net/strongswan/Makefile *CONFIGURE_ARGS+= \ 섹션에 bypass-lan 옵션 추가

--enable-bypass-lan

make menuconfig

(x86, x86_64)

Advanced configuration options > Automatic rebuild of packages > *

Network > VPN > Strongswan > M > Strongswan-full > M > Save > .config > OK

make defconfig

make prereq

make -j 4

scp -r owl@Ubuntu주소:/home/owl/openwrt-19.07.2/bin/packages/x86_64/packages /Down

scp -r /Down/packages root@OpenWRT주소:/tmp

cd /tmp

opkg install strongswan-full_5.8.2-2_x86_64.ipk

*OpenWRT가 아닌 Linux, Unix에서는 strongSwan 설치시 ./configure에 --enable-bypass-lan 옵션을 추가한다.