Re: linux-ipsec: startup

> Do you have to do the "ipsec auto snt add" every time you start up, or just

Any time you've started a new instance of pluto (through system restart, or ipsec_setup restarting of the IPSEC subsystem) which hasn't been told about that connection.

You can automate this by putting snt in the PLUTOLOAD variable in the con-fig file. Other than that, potential connections become known to pluto only via "add".

> At this point, will just doing and "ipsec auto snt up" work for startup or

The startup sequence does a "ready", and only one of those is needed. Once the connection is known to pluto, just "up" suffices.

                                                          Henry Spencer
                                                       henry@spsystems.net
                                                     (henry@zoo.toronto.edu)