(racoon 659) Re: dynamic tunneling

Il lun, 2004-08-23 alle 13:43, Juan Antonio Martínez Navarro ha scritto:
> Hi,
> 
> I can make an ipsec tunnel doing this steps:
> 1. I set the politics in the setkey.conf
> 2. I execute setkey -f setkey.conf
> 3. I set the racoon.conf rules. Remote, SAInfo ...
> 4. and I startup racoon daemon.
> 
> But I'd like to know if I can establish an ipsec tunnel between two host
> dynamicaly. How can I modify racoon.conf and establish a new tunnel
> without stop de racoon daemon and startup it again?
> 
> Thank you,

I use debian racoon-tool and while I have some troubles to understand
how to set up it (but it was the first time I try to set a tunnel) now I
think that its flexibility is a worth-while effort.

In fact it set up dinamically the spd and sad entries so (if you put
anonymous stanza in the racoon-tool.conf file as seems you would like to
do), all should works fine. I choose also to use the x509 certificates
to solve the problem of authentication.

Hope this help

ciao, Michele