[strongSwan] kernel SPD policy not installed until successful IKE negotiation completes

Tobias Brunner tobias at strongswan.org
Wed Mar 7 10:53:10 CET 2012

Hi Alex,

> Is there a way to instruct strongswan to install the security policy
> right upon starting?

Try auto=route.  This installs the policies right away and if traffic
matches them the daemon will try to setup the appropriate IKE/IPsec SAs.

The installpolicy option is intended for MIPv6 where the policies are
not managed by the IKE daemon.


More information about the Users mailing list