SAINFO with tunnel mode configuration

Status: Alpha

Brought to you by: d1968, sgros

#21 SAINFO with tunnel mode configuration

Status: open

Owner: mmikic

Labels: Configuration (3)

Priority: 5

Updated: 2009-04-15

Created: 2009-04-15

Private: No

When using 'kernel_spd generate' option to put SP into kernel and SAINFO with 'ipsec_mode tunnel' IKE ignores this SP.

Obviously tunnel endpoints are not specified and IKE gives:

1239714875.765 pfkey ERROR - pfkey_spdadd:1475: Tunnel mode requested without specifying tunnel endpoints. Ignoring policy!

How to specify tunnel endpoints in SAINFO part of configuration?