diff options
| author | Bill Nottingham <notting@redhat.com> | 2005-03-28 20:42:47 +0000 |
|---|---|---|
| committer | Bill Nottingham <notting@redhat.com> | 2005-03-28 20:42:47 +0000 |
| commit | 95fc0d1440cefbb0a8ae1df0f542cc56d6890250 (patch) | |
| tree | 5baf580e2ce648355840b87291090f0c765e3ea5 | |
| parent | b6885dad0b339bec44804f272e0c3b8063288b3a (diff) | |
| download | initscripts-95fc0d1440cefbb0a8ae1df0f542cc56d6890250.tar initscripts-95fc0d1440cefbb0a8ae1df0f542cc56d6890250.tar.gz initscripts-95fc0d1440cefbb0a8ae1df0f542cc56d6890250.tar.bz2 initscripts-95fc0d1440cefbb0a8ae1df0f542cc56d6890250.tar.xz initscripts-95fc0d1440cefbb0a8ae1df0f542cc56d6890250.zip | |
add proper ipsec route (#146169, #140654)
| -rwxr-xr-x | sysconfig/network-scripts/ifdown-ipsec | 5 | ||||
| -rwxr-xr-x | sysconfig/network-scripts/ifup-ipsec | 6 |
2 files changed, 7 insertions, 4 deletions
diff --git a/sysconfig/network-scripts/ifdown-ipsec b/sysconfig/network-scripts/ifdown-ipsec index cbc8e2df..ffaaa3a3 100755 --- a/sysconfig/network-scripts/ifdown-ipsec +++ b/sysconfig/network-scripts/ifdown-ipsec @@ -61,8 +61,9 @@ EOF else [ -z "$SRCNET" ] && SRCNET="$SRC/32" [ -z "$DSTNET" ] && DSTNET="$DST/32" - - ip route del to $DSTNET via $DST + + [ -z "$SRCGW" ] && SRCGW=`ip -o route get to $SRCNET | sed "s|.*src \([^ ]*\).*|\1|"` + ip route del to $DSTNET via $SRCGW src $SRCGW /sbin/setkey -c >/dev/null 2>&1 << EOF spddelete $SRCNET $DSTNET any -P out; diff --git a/sysconfig/network-scripts/ifup-ipsec b/sysconfig/network-scripts/ifup-ipsec index 4751b5cc..0314f71a 100755 --- a/sysconfig/network-scripts/ifup-ipsec +++ b/sysconfig/network-scripts/ifup-ipsec @@ -137,7 +137,8 @@ EOF [ -z "$SRCNET" ] && SRCNET="$SRC/32" [ -z "$DSTNET" ] && DSTNET="$DST/32" - ip route add to $DSTNET via $DST + [ -z "$SRCGW" ] && SRCGW=`ip -o route get to $SRCNET | sed "s|.*src \([^ ]*\).*|\1|"` + ip route add to $DSTNET via $SRCGW src $SRCGW /sbin/setkey -c >/dev/null 2>&1 << EOF delete $SRC $DST ah $SPI_AH_OUT; @@ -191,7 +192,8 @@ EOF [ -z "$SRCNET" ] && SRCNET="$SRC/32" [ -z "$DSTNET" ] && DSTNET="$DST/32" - ip route add to $DSTNET via $DST + [ -z "$SRCGW" ] && SRCGW=`ip -o route get to $SRCNET | sed "s|.*src \([^ ]*\).*|\1|"` + ip route add to $DSTNET via $SRCGW src $SRCGW /sbin/setkey -c >/dev/null 2>&1 << EOF spddelete $SRCNET $DSTNET any -P out; |