IPSec a nenavazujici se spojeni [delsi]

[Petr Vejsada]

Zdenek SUTR Kaminski wrote:

>> zkusil bych neco jineho, treba keyingtries=2
> 
> No, tohle me taky napadlo. Jenze problem je v tom, ze freeswan to zkusi,
> pak to zkusi za 10vt, pak za 20vt a pak za 40vt a kdyz mam keyingtries=1,
> tak prohlasi, ze neuspel a pokracuje dalsim nadefinovanym tunelem.

Nemam odzkouseno (sam mam ipsec jen na obcasne pripojovani notebooku 
(RoadWariors) a pouzivam superfreeswan, coz je patchnuta freeswan 
(http://www.freeswan.ca), muj man ipsec_auto rika, ze:

The --asynchronous option, applicable only to the up oper-
       ation, tells pluto to attempt to establish the connection,
       but does not delay to report results.  This is  especially
       useful to start multiple connections in parallel when net-
       work links are slow.

Takze bych nechal v configu auto=add a ponechal bych i ten skript, kterym 
davate ipsec auto --up <neco> a pridal bych --asynchronous, coz by alespon 
podle manu melo zabrat.


-- 
Petr /daemon(zavinac)svoboda(tecka)cz/