<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<div style="line-height:1.6;font-family:'苹方','微软雅黑','sans-serif';">thanks for your response.I install strongswan on centos7.2, does it can't support kernel-ipsec?I run'./configure ..... --enable-kernel-ipsec' it shown warning, can't find kernel-ipsec, how can i do?<br><br></div><div class="ne-quoted">
<a href="https://maas.mail.163.com/dashi-web-extend/html/proSignature.html?iconUrl=https://mail-online.nosdn.127.net/qiyelogo/defaultAvatar.png&name=陆晓萍&uid=piaoliugirl%40163.com&ftlId=3&items=%5B%22%E9%82%AE%E7%AE%B1%EF%BC%9Apiaoliugirl%40163.com%22%5D" width="400" style="display:block; max-width: 400px; _width: 400px; background:#fff;padding:15px 0 10px 0;text-decoration: none; outline:none;-webkit-tap-highlight-color:transparent;-webkit-text-size-adjust:none !important;text-size-adjust:none !important;">
<table cellpadding="0" style="width:100%; max-width: 100%; table-layout: fixed; border-collapse: collapse; border-spacing: 0; line-height: 1.3; color: #9b9ea1;font-size: 14px;-webkit-text-size-adjust:none !important;text-size-adjust:none !important;">
<tbody style="font-family: 'PingFang SC', 'Hiragino Sans GB','WenQuanYi Micro Hei', 'Microsoft Yahei', '微软雅黑', verdana !important; word-wrap:break-word; word-break:break-all;-webkit-text-size-adjust:none !important;text-size-adjust:none !important;">
<tr>
<td width="45" style="padding:0 7px 0 0; box-sizing: border-box; width: 45px;">
<img width="38" height="38" style="width: 38px; height: 38px; border-radius:50%;" src="https://mail-online.nosdn.127.net/qiyelogo/defaultAvatar.png">
</td>
<td style="padding: 0 0 0 7px;">
<div style="max-width: 380px; _width: 380px;">
<div style="box-sizing: border-box; padding-right: 35px; font-size: 16px; margin-bottom: 5px; color:#31353b;font-weight:bold;width: 100%; white-space: nowrap;overflow: hidden;text-overflow: ellipsis;">陆晓萍</div>
<div style="font-size:0;line-height: 0;">
</div>
<div style="word-wrap:break-word;word-break:break-all">
邮箱：piaoliugirl@163.com
</div>
</div>
</td>
</tr>
</tbody>
</table>
</a>
<html><body style="margin:0"><p style="margin:0;border-top:1px solid #e5e5e5;padding-top: 6px; font-size: 12px; color:#b6b8bb;line-height: 1.5;">签名由 <a href="https://mail.163.com/dashi/dlpro.html?from=mail88" style="color:#6aa8f6;text-decoration: none">网易邮箱大师</a> 定制</p></body></html><blockquote id="ntes-andriodmail-quote" style="margin:0px !important;padding:0px !important;border: none !important;"><div class="J-reply" style="background-color:#f2f2f2;color:black;padding-top:6px;padding-bottom:6px;border-radius:3px;-moz-border-radius:3px;-webkit-border-radius:3px;margin-top:45px;margin-bottom:20px;">
<div style="font-size:14px;line-height:1.5;word-break:break-all;margin-left:10px;margin-right:10px">在<span class="mail-date">2018年05月25日 20:03</span>，<a class="mail-to" style="text-decoration:none;color:#2a97ff;" href="mailto:tobias@strongswan.org">Tobias Brunner</a> 写道：</div>
</div>Hi,
<br>
<br>> I configured a ikev2 , net-to-net, psk, i can use "ipsec up" command
<br>> to establish tunnel, but it can't established by a coming traffic, of
<br>> course, the ttraffic can match the rule.
<br>
<br>The kernel-libipsec plugin does currently not support trap policies. So
<br>disable that plugin and use the kernel's IPsec stack instead (via
<br>kernel-netlink plugin).
<br>
<br>Regards,
<br>Tobias
<br></blockquote></div>
</body>
</html>