[Openswan Users] Question about routing

Paul Wouters paul at xelerance.com
Wed Mar 8 16:45:19 CET 2006

On Tue, 7 Mar 2006, Ruben CL wrote:

> If there are a static route between 2 hosts and also there is a tunnel between
> them,
> the comunication between them is encrypted when the tunnel is up and
> unencrypted when the tunnel is down?? Or always they comunicate, they start
> the tunnel??

If both have 'auto=start', then no plaintext packets are allowed to flow, even
if the tunnel is down. If the tunnel is not loaded (auto=ignore, or manually deleted
with ipsec auto --delete connname) then cleartext packets are allowed to travel
between the hosts.

Building and integrating Virtual Private Networks with Openswan:

More information about the Users mailing list