[Openswan Users] how to set SPA

[Paul Wouters]

On Fri, 24 Jul 2009, Li Yewang wrote:

> how to set SPD use openswan?

If you want to set anything manual (not recommended) then your best bet,
is to use the "ip xfrm" command, or use the setkey command. Note that
this means you're not really using Openswan, you're directly "managing"
the kernel SAD/SPD entries. This assumes using the NETKEY IPsec stack.

If using KLIPS, all manipulation should go through through "ipsec spi",
"ipsec spigrp" and "ipsec manual". We strongly discourage (and no longer
support) manual keying.

Paul