[Openswan Users] Getting IPSec policy into kernel
marcus at mejlamej.nu
Sat Mar 17 19:40:23 EDT 2007
What about ipsec auto --add <connection-name>?
As far as I know it is supposed to do what you request...
Venkat Yekkirala skrev:
> I am looking for a way to have just the IPSec policy to be
> inserted into the kernel initially, and for the SAs to be
> negotiated ON DEMAND.
> When I issue the following command, the SAs as well as the SPD
> are loaded in the kernel.
> ipsec auto --up <connection-name>
> I have looked at the "asynchronous" option to --up, but that still
> doesn't result in ONLY the IPSec policy being loaded into the SPD.
> Users at openswan.org
> Building and Integrating Virtual Private Networks with Openswan:
More information about the Users