[Openswan Users] Please help with routing bypassing tunnel

[Paul Wouters]

On Wed, 9 Mar 2005, Guy Bullen-Smith wrote:

> If I ping from one end to the other it sometimes goes through the tunnel
> and othertimes not.  It seems to depend on the order of entries in the
> routing table.

Not the order, it depends on longest prefix match. The most specific route is
taken first.

> Could you please tell me what to do prevent any network traffic to
> or from the endpoints other than through the tunnel (excepting ARP)?

Make a host route or more specific network route into the physical
interface instead of the ipsecX interface.

Paul