[strongSwan] kernel SPD policy not installed until successful IKE negotiation completes
tobias at strongswan.org
Wed Mar 7 14:47:47 CET 2012
> It would be good if "auto" could have an option to both install the
> policy and initiate negotiation (both "route" and "start"). I guess
> this is not possible right now, isn't it?
No, there is no such option right now. It's usually not needed as
auto=route automatically initiates the negotiation if any traffic
matches the installed policy. In all other cases ipsec up <name> does
the trick (or using whack directly as you did).
More information about the Users