<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=windows-1250">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7638.1">
<TITLE>Ipsec0 entry in route table</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P><FONT SIZE=2 FACE="Arial">. I am using openswan 2.4.5 and I have a problem, when I reboot the LINUX machine</FONT>
<BR><FONT SIZE=2 FACE="Arial"> with openswan stopped and then start openswan my VPN comes up and everything is</FONT>
<BR><FONT SIZE=2 FACE="Arial"> fine. </FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">When I reboot the machine with openswan running and I do and IP route show it</FONT>
<BR><FONT SIZE=2 FACE="Arial"> it places a route to the 10.0.0.0 network using the ipsec0 interface.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">10.123.63.128/26 dev eth1 proto kernel scope link src 10.123.63.190</FONT>
<BR><FONT SIZE=2 FACE="Arial">10.123.63.128/26 dev ipsec0 proto kernel scope link src 10.123.63.190</FONT>
<BR><FONT SIZE=2 FACE="Arial">192.168.5.0/24 dev eth2 proto kernel scope link src 192.168.5.1</FONT>
<BR><FONT SIZE=2 FACE="Arial">192.168.4.0/24 dev eth4 proto kernel scope link src 192.168.4.1</FONT>
<BR><FONT SIZE=2 FACE="Arial">192.168.3.0/24 dev eth3 proto kernel scope link src 192.168.3.1</FONT>
<BR><FONT SIZE=2 FACE="Arial">192.168.2.0/24 dev eth2 proto kernel scope link src 192.168.2.1</FONT>
<BR><FONT SIZE=2 FACE="Arial">10.0.0.0/8 dev ipsec0 scope link</FONT>
<BR><FONT SIZE=2 FACE="Arial"> default via 10.123.63.189 dev eth1 proto static</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial"> When this route is in the route table everything going to a 10.x.x.x network</FONT>
<BR><FONT SIZE=2 FACE="Arial">is routed to ipsec0 interface even if the source address doesn't match the security</FONT>
<BR><FONT SIZE=2 FACE="Arial">association (bad). Does anyone understand what is happening here? When openswan is started on a machine that </FONT>
<BR><FONT SIZE=2 FACE="Arial">is already booted up there is no route for the ipsec0 interface when the tunnel comes up and only the </FONT>
<BR><FONT SIZE=2 FACE="Arial">traffic with both the correct source and destination addresses are tunneled.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Any help would be greatly appreciated.</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Regards,</FONT>
</P>
<P><FONT SIZE=2 FACE="Arial">Daren</FONT>
<BR>
<BR><FONT SIZE=2 FACE="Arial">--<BR>
No virus found in this outgoing message.<BR>
Checked by AVG Free Edition.<BR>
Version: 7.1.409 / Virus Database: 268.16.2/613 - Release Date: 1/1/2007<BR>
</FONT>
</P>
</BODY>
</HTML>