[Openswan Users] Backup routing

[Greg Scott]

> I was never clear on this - if I start a tunnel on the left side from 
> left-->right, it it necessary to also start a tunnel on the right 
> side from right-->left?  

I may have answered my own question.  My copy of "Building and
Integrating Virtual Private Networks with Openswan" is getting a little
bit dog-eared.  Page 83 describes the auto= line in the connection
definitions.  It looks like I want auto=add on both sides.  The left
side is remote, the right side is the main office.  So the idea would
be, the right side would listen for inbound connection requests and then
turn up the tunnel when one comes in.  The left side would poll the
telco circuit and when the circuit goes down, do ipsec auto --up {tunnel
name}.  When the telco circuit comes back alive, do ipsec auto --down
{Tunnel name}.

Does this make sense?

- Greg