(racoon 661) Re: dynamic tunneling

El lun, 23-08-2004 a las 14:58, Michele Bendazzoli escribió:
> Il lun, 2004-08-23 alle 13:43, Juan Antonio Martínez Navarro ha scritto:
> > Hi,
> > 
> > I can make an ipsec tunnel doing this steps:
> > 1. I set the politics in the setkey.conf
> > 2. I execute setkey -f setkey.conf
> > 3. I set the racoon.conf rules. Remote, SAInfo ...
> > 4. and I startup racoon daemon.
> > 
> > But I'd like to know if I can establish an ipsec tunnel between two host
> > dynamicaly. How can I modify racoon.conf and establish a new tunnel
> > without stop de racoon daemon and startup it again?
> > 
> > Thank you,
> 
> I use debian racoon-tool and while I have some troubles to understand
> how to set up it (but it was the first time I try to set a tunnel) now I
> think that its flexibility is a worth-while effort.
> 
> In fact it set up dinamically the spd and sad entries so (if you put
> anonymous stanza in the racoon-tool.conf file as seems you would like to
> do), all should works fine. I choose also to use the x509 certificates
> to solve the problem of authentication.
> 
> Hope this help
> 
> ciao, Michele
> 
I can set up dinamically ths spd and sad entries, but i work with
preshared keys. What I wan to know is if I can add newest entries to the
racoon.conf file like "remote ...." and "sainfo ..." for a new tunnel to
another host without restarting racoon daemon.

Is it possible? thanks.