Re: [Ipsec-tools-devel] Hybrid auth client support

[<ma...@ne...>]

Aidas Kasparas <a.k...@gm...> wrote:

> > And we have a esp/transport//require policy between roadwarrior and
> > ipsec-gw, so that the IPsec SA get negociated.
> I don't think this is necessary. I would go for "passive off;" in remote
> section corresponding to server. That should be sufficient to initiate
> negotiation with server.

off is the default, so that's not the solution.  
It might be desirable to have some SA initiated as soon as racoon
starts. There is no way to do this yet?

-- 
Emmanuel Dreyfus
Il y a 10 sortes de personnes dans le monde: ceux qui comprennent 
le binaire et ceux qui ne le comprennent pas.
ma...@ne...