Re: Multiple shared secret per IP?

On Feb 13, 2017, at 9:47 AM, Chris Taylor (chtaylo2) <chtaylo2@cisco.com> wrote:

Is it possible to have multiple secret strings per IP or maybe different domains per IP? If not, any recommendations?

No. The clients should use IPSec to get different private IPs, or they should use RADIUS over TLS. This is one of the things we're looking at changing in v4. It should be possible to have shared secrets per connection, i.e. (src/dst IP/port) Alan DeKok.