Jamie Heckford:
>/usr/sbin/setkey -c << EOF
>flush;
>spdflush;
>spdadd ${LOCAL_NETWORK} ${STJUST_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${STJUST_OUTSIDE}/require;
>spdadd ${STJUST_NETWORK} ${LOCAL_NETWORK} any -P in  ipsec
>esp/tunnel/${STJUST_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>spdadd ${ALLNET_1} ${STJUST_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${STJUST_OUTSIDE}/require;
>spdadd ${STJUST_NETWORK} ${ALLNET_1} any -P in  ipsec
>esp/tunnel/${STJUST_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>spdadd ${LOCAL_NETWORK} ${BENELUX_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${BENELUX_OUTSIDE}/require;
>spdadd ${BENELUX_NETWORK} ${LOCAL_NETWORK} any -P in ipsec
>esp/tunnel/${BENELUX_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>spdadd ${ALLNET_1} ${BENELUX_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${BENELUX_OUTSIDE}/require;
>spdadd ${BENELUX_NETWORK} ${ALLNET_1} any -P in ipsec
>esp/tunnel/${BENELUX_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>EOF

Try using "unique" instead of "require".

Helge
_______________________________________________
[EMAIL PROTECTED] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to