<html>
<head>
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>
</head>
<body class='hmmessage'>
Hi !<br> The vpn routes are established as kernel routes and can be redistributed quite easily using OSPF/BGP.<br> Thanks !<br><br><span style="font-family: Tahoma,Helvetica,Sans-Serif; font-style: italic; font-weight: bold;">-<span style="font-family: Times New Roman,Times,Serif;"> Simon Charles - </span></span><br><br><br><br><br><hr id="stopSpelling">From: andrew.lemin@monitorsoft.com<br>To: users@openswan.org<br>Date: Sat, 21 Feb 2009 13:02:19 +0000<br>Subject: [Openswan Users] dynamic routing protocols with NETKEY<br><br>
<style>
.ExternalClass p.EC_MsoNormal, .ExternalClass li.EC_MsoNormal, .ExternalClass div.EC_MsoNormal
{margin-bottom:.0001pt;font-size:11.0pt;font-family:'Calibri','sans-serif';}
.ExternalClass a:link, .ExternalClass span.EC_MsoHyperlink
{color:blue;text-decoration:underline;}
.ExternalClass a:visited, .ExternalClass span.EC_MsoHyperlinkFollowed
{color:purple;text-decoration:underline;}
.ExternalClass p.EC_MsoPlainText, .ExternalClass li.EC_MsoPlainText, .ExternalClass div.EC_MsoPlainText
{margin-bottom:.0001pt;font-size:10.5pt;font-family:Consolas;}
.ExternalClass span.EC_EmailStyle17
{font-family:'Calibri','sans-serif';color:windowtext;}
.ExternalClass span.EC_PlainTextChar
{font-family:Consolas;}
.ExternalClass .EC_MsoChpDefault
{;}
@page Section1
{size:612.0pt 792.0pt;}
.ExternalClass div.EC_Section1
{page:Section1;}
</style>
<div class="EC_Section1">
<p class="EC_MsoPlainText">Hello,</p>
<p class="EC_MsoPlainText"> </p>
<p class="EC_MsoPlainText">I have been trying to research for any possible method to
get dynamic routing working to advertise VPN routes when using NETKEY.</p>
<p class="EC_MsoPlainText"> </p>
<p class="EC_MsoPlainText">So far I have found nothing!</p>
<p class="EC_MsoPlainText">I just don't understand why NETKEY does not provide a way
of exporting established VPN policies as routes to allow dynamic routing
protocols to work. Surely this is a HUGE deal and I can't be the only one with
this problem.</p>
<p class="EC_MsoPlainText"> </p>
<p class="EC_MsoPlainText">PS. KLIPS is not an option, I am stuck with NETKEY.</p>
<p class="EC_MsoPlainText"> </p>
<p class="EC_MsoPlainText">Would it be possible to use the command 'ip xfrm state'
in a script to create dummy routes when can then in turn be advertised?</p>
<p class="EC_MsoPlainText"> </p>
<p class="EC_MsoPlainText">Thank you in advance.</p>
<p class="EC_MsoNormal"> </p>
</div></body>
</html>