[strongSwan] Query regarding route based security

vivek bairathi bairathi.vivek at gmail.com
Mon Nov 1 13:34:43 CET 2010

Hi All,

I want to know that if I set auto=route in ipsec.conf for a connection.

The IKEv2 stack will install kernel traps for that connection and will
initiate an SA only when it gets a packet between the leftsubnet and the

For this the IKEv2 stack needs trigger from kernel so which interface will
be used to tell IKEv2 Stack that a packet has hit its kernel traps and now
you have to init an IKE_SA?

Thanks & Regards
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20101101/e7410f1b/attachment.html>

More information about the Users mailing list