diff options
| author | Bill Nottingham <notting@redhat.com> | 2003-09-12 21:43:45 +0000 |
|---|---|---|
| committer | Bill Nottingham <notting@redhat.com> | 2003-09-12 21:43:45 +0000 |
| commit | a32681ea9aec9b73fe7dd0b65a20b1321db3b48b (patch) | |
| tree | d5296927d206e568950b3e667f11df43cf2244f5 | |
| parent | de580885827e536e7446e82cd6a3095812745fa5 (diff) | |
| download | initscripts-a32681ea9aec9b73fe7dd0b65a20b1321db3b48b.tar initscripts-a32681ea9aec9b73fe7dd0b65a20b1321db3b48b.tar.gz initscripts-a32681ea9aec9b73fe7dd0b65a20b1321db3b48b.tar.bz2 initscripts-a32681ea9aec9b73fe7dd0b65a20b1321db3b48b.tar.xz initscripts-a32681ea9aec9b73fe7dd0b65a20b1321db3b48b.zip | |
for tunneling, add a route for the tunneled net through the other host
| -rwxr-xr-x | sysconfig/network-scripts/ifdown-ipsec | 2 | ||||
| -rwxr-xr-x | sysconfig/network-scripts/ifup-ipsec | 4 |
2 files changed, 6 insertions, 0 deletions
diff --git a/sysconfig/network-scripts/ifdown-ipsec b/sysconfig/network-scripts/ifdown-ipsec index 37e5f76f..695a71a1 100755 --- a/sysconfig/network-scripts/ifdown-ipsec +++ b/sysconfig/network-scripts/ifdown-ipsec @@ -56,6 +56,8 @@ else [ -z "$SRCNET" ] && SRCNET="$SRC/32" [ -z "$DSTNET" ] && DSTNET="$DST/32" + ip route del to $DSTNET via $DST + /sbin/setkey -c >/dev/null 2>&1 << EOF spddelete $SRCNET $DSTNET any -P out; spddelete $DSTNET $SRCNET any -P in; diff --git a/sysconfig/network-scripts/ifup-ipsec b/sysconfig/network-scripts/ifup-ipsec index 3ea68768..b474f41d 100755 --- a/sysconfig/network-scripts/ifup-ipsec +++ b/sysconfig/network-scripts/ifup-ipsec @@ -137,6 +137,8 @@ EOF [ -z "$SRCNET" ] && SRCNET="$SRC/32" [ -z "$DSTNET" ] && DSTNET="$DST/32" + ip route add to $DSTNET via $DST + /sbin/setkey -c >/dev/null 2>&1 << EOF delete $SRC $DST ah $SPI_AH_OUT; delete $DST $SRC ah $SPI_AH_IN; @@ -189,6 +191,8 @@ EOF [ -z "$SRCNET" ] && SRCNET="$SRC/32" [ -z "$DSTNET" ] && DSTNET="$DST/32" + ip route add to $DSTNET via $DST + /sbin/setkey -c >/dev/null 2>&1 << EOF spddelete $SRCNET $DSTNET any -P out; spddelete $DSTNET $SRCNET any -P in; |