[Openswan Users] --up overwrites routing table entry

[Paul Wouters]

On Tue, 17 Apr 2007, hans lux wrote:

> when i call ipsec auto --up xxx
> to establish a vpn connection
> a route to the connected remote network
> is added to the routing table (via inet gateway).
>
> but also a static route is removed/replaced that
> is needed to route another private network.
>
>
> Destination     Gateway         Genmask         Flags      Iface
> in.et.ad.dr     0.0.0.0         255.255.255.248 U          eth0
> 192.168.5.0     0.0.0.0         255.255.255.0   U          eth2
> 10.106.121.0    0.0.0.0         255.255.255.0   U          eth2
>
> 10.106.99.0     10.106.121.1    255.255.255.0   UG         eth2
>        ^------- this is my static route
> 0.0.0.0         in.et.ad.dr    0.0.0.0         UG         eth0
>
> after ipsec auto --up xxx it becomes
>
> Destination     Gateway         Genmask         Flags      Iface
> in.et.ad.dr     0.0.0.0         255.255.255.248 U          eth0
> 192.168.5.0     0.0.0.0         255.255.255.0   U          eth2
> 10.106.121.0    0.0.0.0         255.255.255.0   U          eth2
>
> 10.106.99.0     in.et.ad.dr    255.255.255.0   UG         eth2
>        ^------- this is my static route
> 0.0.0.0         in.et.ad.dr    0.0.0.0         UG         eth0
>
> so i'm missing my
> 10.106.99.0     10.106.121.1    255.255.255.0   UG         eth2
> line
>
> what's the best way to handle that ?
> can i "catch"  the "up-event" somewhere ?

Set leftnexthop=10.106.121.1

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155