[Openswan Users] uproute in _updown script

Marco Berizzi pupilla at hotmail.com
Fri Feb 17 16:44:44 CET 2006


Ilia Sotnikov wrote:

>On 2/17/06, Marco Berizzi <pupilla at hotmail.com> wrote:
> > I would like to know if there is a quick & dirty solution to
> > remove the static route placed by openswan for every tunnel.
> > They aren't needed anymore on linux 2.6 with netkey.
>
>Not really. For example one would want to install route with src
>specification (like 'ip route xx.xx.xx.0/24 dev eth0 src
>yy.yy.yy.yy').
>
>Could you please explain why the routes Pluto installs are not
>necessary?

Because netkey doesn't have ipsecX virtual devices, there is
no need to route traffic to the default gateway interface.




More information about the Users mailing list