[strongSwan] Query regarding route based security

[vivek bairathi]

Hi All,

I want to know that if I set auto=route in ipsec.conf for a connection.

The IKEv2 stack will install kernel traps for that connection and will
initiate an SA only when it gets a packet between the leftsubnet and the
rightsubnet.

For this the IKEv2 stack needs trigger from kernel so which interface will
be used to tell IKEv2 Stack that a packet has hit its kernel traps and now
you have to init an IKE_SA?

Thanks & Regards
Vivek
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.strongswan.org/pipermail/users/attachments/20101101/e7410f1b/attachment.html>