[Openswan Users] Add route only after the connection was sucessful

[Paul Wouters]

On Wed, 27 Apr 2011, Diogo V. kersting wrote:

> Yes, auto=add works like a charm. The route exists as long as IPsec SA
> is established.
> The problem is that if I want to use auto=add on both sides I have to
> start the connection manually with ipsec auto --up connection, and I
> wanted this to be done automatically.
> Do you have any suggestions?

It seems you want to have the cake and eat it too...

If you want the connection to automatically start, it has to do the route
to catch the packets to initiate the start of the tunnel on demand.

Paul