On Sat, Oct 1, 2011 at 2:30 PM, nima chavooshi <[email protected]> wrote: > hi > first of all excuse me for dummy question. > When I started to reading about IPSsec, i have understand that ike is for > generate and exchange of SA and other critical information for creating > tuunel. > Is it possible that I generate those needed information manually and put on > endpoint tunnel in order to remove completely ike phases?in fact i want to > remove ike phases and requirement information are hardcoded on endpoints. > > thanks for any help or guidance. > > > _______________________________________________ > Users mailing list > [email protected] > https://lists.strongswan.org/mailman/listinfo/users >
Yes, it's possible. Not a good idea but possible. Have a look to the "ip xfrm" command o use ipsec-tools (and the setkey command). Regards, Diego -- Diego Woitasen _______________________________________________ Users mailing list [email protected] https://lists.strongswan.org/mailman/listinfo/users
