[Openswan Users] Getting IPSec policy into kernel

[Venkat Yekkirala]

Hi,

I am looking for a way to have just the IPSec policy to be
inserted into the kernel initially, and for the SAs to be
negotiated ON DEMAND.

When I issue the following command, the SAs as well as the SPD
are loaded in the kernel.

ipsec auto --up <connection-name>

I have looked at the "asynchronous" option to --up, but that still
doesn't result in ONLY the IPSec policy being loaded into the SPD.

Thanks,

venkat