[strongSwan] kernel SPD policy not installed until successful IKE negotiation completes

[Tobias Brunner]

Hi Alex,

> Is there a way to instruct strongswan to install the security policy
> right upon starting?

Try auto=route.  This installs the policies right away and if traffic
matches them the daemon will try to setup the appropriate IKE/IPsec SAs.

The installpolicy option is intended for MIPv6 where the policies are
not managed by the IKE daemon.

Regards,
Tobias