[Openswan Users] How to add new interface to running openswan

[Alexander Samad]

On Mon, May 23, 2005 at 11:43:35AM +0200, Paul Wouters wrote:
> On Mon, 23 May 2005, Alexander Samad wrote:
> 
> >tried but to no avail, I don't have a ipsec0. running 2.6.11
> 
> Then the tuncfg command is not needed. Using the ipsec whack --listen

just found this --listen have installed it in my scripts see what
happens

> and ipsec auto --replace and --up the connection should then work though.
> 
> Paul
> 
> >I looked thorugh my logs and found that it loads interface eth0/eth0,
> >tried that to no avail
> >
> >A
> >
> >On Mon, May 23, 2005 at 12:56:10AM +0200, Paul Wouters wrote:
> >>On Mon, 23 May 2005, Alexander Samad wrote:
> >>
> >>>Is there any way to re attached this interface without having to re
> >>>start open swan so that I can use it ?
> >>
> >>If your interface appears with the same IP address, yes. I personally use:
> >>
> >># default route moves from ppp to ipsec device because I use extrusion
> >>echo "fixing default route for ipsec fixup"
> >>route del default
> >>route add default gw yourgateway dev ppp0
> >># if openswan runs, re-attach
> >>if [ -f /var/run/pluto.pid ]
> >>then
> >>        echo "IPsec is running, fixing ipsec over ppp"
> >>        echo "Detaching ipsec0 from previous ppp0 device"
> >>        ipsec tncfg --detach --virtual ipsec0 > /dev/null 2> /dev/null
> >>        echo "Attaching ipsec0 to new ppp0"
> >>        ipsec tncfg --attach --virtual ipsec0 --physical ppp0
> >>fi
> >>
> >>>it seem like when the pppoe goes through a dhcp cycle i can no longer
> >>>send out that interface
> >>
> >>If your IP address has changed, and you used something like
> >>	left=%defaultroute
> >>then you might get away with the above, plus:
> >>	ipsec whack --listen
> >>	ipsec --replace connname
> >>	ipsec --up connname
> >>
> >>Paul
> >>
> >
> 
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url : http://lists.openswan.org/pipermail/users/attachments/20050523/fdef099e/attachment.bin