IPSEC/ISAKMPD routing question

2011-01-10 Thread Christoph Leser
Hello, I have an IPSEC VPNs in Tunnelmode, configured in ipsec.conf with a line like: ike active esp tunnel from my_internal_net to his_internal_net peer his_gateway_address main_mode_parameters quick_mode_parameters preshared_key My isakmpd.policy file is # cat /etc/isakmpd/isakmpd.policy

Re: IPSEC/ISAKMPD routing question

2011-01-10 Thread Martin Pelikan
2011/1/10, Christoph Leser le...@sup-logistik.de: Hello, I have an IPSEC VPNs in Tunnelmode, configured in ipsec.conf with a line like: ike active esp tunnel from my_internal_net to his_internal_net peer his_gateway_address main_mode_parameters quick_mode_parameters preshared_key My

Re: IPSEC/ISAKMPD routing question

2011-01-10 Thread Martin Pelikan
2011/1/10, Christoph Leser le...@sup-logistik.de: I would like to ask: 1. Is it true, that isakmpd is supposed to accept any ID parameter of type IPV4_ADDR_SUBNET ) in quick mode and set up a corresponing route, even when it is the 'default' route? Yes, some people want all their traffic