lkml.org 
[lkml]   [2009]   [Nov]   [11]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
Date
From
SubjectRe: Subject: RE: port bound SAs : ip xfm state command ?
On Wed, Nov 11, 2009 at 01:17:25PM +0530, ramaswamy.bm wrote:
> What is the command to write port based SA's using ip xfrm state.
>
> iam using below command for writing SA's : ip xfrm state add src
> 192.168.1.20 dst 192.168.1.5 proto esp spi 0x354cb04b mode tunnel reqid
> 16385 replay-window 32 auth sha1
> 0xecf02a5cf6568556e1bdcd961c7ec3f92afd01cc enc aes
> 0x5c0cfa9672ce67ba545b593076dfb278 sel src 0.0.0.0/0 dst 0.0.0.0/0

Usually you don't want port-based SAs but port-based policies.
The syntax is described in "ip xfrm policy help". Look for sport
and dport.

Cheers,
--
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt


\
 
 \ /
  Last update: 2009-11-12 00:19    [W:0.053 / U:0.484 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site