On Mon, May 2, 2016 at 4:49 AM, Michael Furman <michael_furman at hotmail.com> wrote: > Is it enough to run “ipsec auto –up” only on one side? Yes. You can just run it on one side in order to initiate an IPsec connection