[strongSwan] kernel SPD policy not installed until successful IKE negotiation completes
tobias at strongswan.org
Wed Mar 7 10:53:10 CET 2012
> Is there a way to instruct strongswan to install the security policy
> right upon starting?
Try auto=route. This installs the policies right away and if traffic
matches them the daemon will try to setup the appropriate IKE/IPsec SAs.
The installpolicy option is intended for MIPv6 where the policies are
not managed by the IKE daemon.
More information about the Users