Messages in this thread | | | Date | Thu, 12 Nov 2009 07:15:53 +0800 | From | Herbert Xu <> | Subject | Re: Subject: RE: port bound SAs : ip xfm state command ? |
| |
On Wed, Nov 11, 2009 at 01:17:25PM +0530, ramaswamy.bm wrote: > What is the command to write port based SA's using ip xfrm state. > > iam using below command for writing SA's : ip xfrm state add src > 192.168.1.20 dst 192.168.1.5 proto esp spi 0x354cb04b mode tunnel reqid > 16385 replay-window 32 auth sha1 > 0xecf02a5cf6568556e1bdcd961c7ec3f92afd01cc enc aes > 0x5c0cfa9672ce67ba545b593076dfb278 sel src 0.0.0.0/0 dst 0.0.0.0/0
Usually you don't want port-based SAs but port-based policies. The syntax is described in "ip xfrm policy help". Look for sport and dport.
Cheers, -- Visit Openswan at http://www.openswan.org/ Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au> Home Page: http://gondor.apana.org.au/~herbert/ PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
| |