(usagi-users 03311) Re: setkey can't set SPD properly
Noriaki TAKAMIYA <[email protected]>
| Newsgroups | gmane.linux.ipv6.usagi.users |
|---|---|
| Message-ID | <[email protected]> |
Hi, >> Thu, 14 Apr 2005 13:13:16 +0800 >> [Subject: (usagi-users 03309) Re: setkey can't set SPD properly] >> "Lv Liangying" <[email protected]> wrote... Lvly> > Yes. To be exact, it is impossible to have two (or more) SPD entries Lvly> > with the same selector (e.g. src/dst_range and upperspec in setkey(8)) for each Lvly> > direction. Lvly> > Lvly> Lvly> But there are four keywords in adding SPD, that are src/dst_range, upperspec and policy. Lvly> So I wonder it should be possible to add, isn't it? In your case, all parameters in the selector match between former and later. >> /sbin/setkey -c <<EOD >> spdadd 3ffe:501:ffff:ff04::/64 3ffe:501:ffff:ff01::/64 >> any >> -P in ipsec : >> It set correctly; >> then I run next script just change protocol >> >> /sbin/setkey -c <<EOD >> spdadd 3ffe:501:ffff:ff04::/64 3ffe:501:ffff:ff01::/64 >> any >> -P in ipsec -- Noriaki Takamiya