(racoon 692) Protecting all traffic

Hi all,

i have just successfully configured a vpn using raccon. But no mater
what spdadd command i use i cannot force it to use the vpn as default
gw. My configuration is below, im using the examples from
www.ipsec-howto.org.

#!/usr/sbin/setkey -f

# Configuracion for 10.34.224.129

# Vaciar las SAD y SPD
flush;
spdflush;


# SAs para AH empleando claves largas de 128 bits
#add 10.34.224.129 10.34.224.133 ah 0x200 -A hmac-md5
0xc0291ff014dccdd03874d9e8
e4cdf3e6;
#add 10.34.224.133 10.34.224.129 ah 0x300 -A hmac-md5
0x96358c90783bbfa3d7b196ce
abe0536b;

# SAs para ESP empleando claves largas de 192 bits (168 + 24 paridad)
add 10.34.224.129 10.34.224.133 esp 0x201 -m tunnel  -E 3des-cbc
0x7aeaca3f87d06
0a12f4a4487d5a5c3355920fae69a96c831  -A hmac-md5
0xc0291ff014dccdd03874d9e8e4cdf
3e6;

add 10.34.224.133 10.34.224.129 esp 0x301 -m tunnel -E 3des-cbc
0xf6ddb555acfd9d
77b03ea3843f2653255afe8eb5573965df -A hmac-md5
0x96358c90783bbfa3d7b196ceabe0536
b;

# Politicas de seguridad
spdadd 10.34.224.129[any] 10.34.224.133[any] any -P in ipsec
           esp/tunnel/10.34.224.129-10.34.224.133/require;
           #ah/tunnel/10.34.224.129-10.34.224.133/require;

spdadd 0.0.0.0/0 0.0.0.0/0 any -P in ipsec
           esp/tunnel/10.34.224.129-10.34.224.133/require;


spdadd 10.34.224.133[any] 10.34.224.129[any] any -P out ipsec
           esp/tunnel/10.34.224.133-10.34.224.129/require;
           #ah/tunnel/10.34.224.133-10.34.224.129/require;

spdadd  0.0.0.0/0 0.0.0.0/0  any -P out ipsec
           esp/tunnel/10.34.224.133-10.34.224.129/require;

How should i define on my laptop the policy to force the default route
?? I mean encrypt all traffic without taking care of its destination ???
The vpn endpoint is the default route too, but traffic goes out clear
.-(((



Cheers.

Javier Sanchez
[email protected]