On Fri, 17 Feb 2017 13:36:08 +0100 Oleg Rosowiecki <[email protected]> wrote:
> The auto= setting indeed implies what the desired dpdaction would be, > but... > > What about a more elaborate scenario when you need to have a > connection ready, but not start it right away (e.g. when you need to > flip tunnels on the fly)? My first thought would be to configure the > initiator using auto=add + dpdaction=restart. This is what I actually > do during my tests that involve embedded equipment, where Libreswan > is only part of the whole infrastructure. > > If course, we could explicitly --add/--delete/--replace connections > in this case... auto=add + ipsec auto --up == auto=start. auto=add in template type connection is different from auto=add in static connection. -- Tuomo Soini <[email protected]> Foobar Linux services +358 40 5240030 Foobar Oy <http://foobar.fi/> _______________________________________________ Swan-dev mailing list [email protected] https://lists.libreswan.org/mailman/listinfo/swan-dev
