On Tue, Feb 24, 2009 at 06:30:41PM -0800, Paul Moore wrote:
quoted text
> could u suggest a numbering for my 4 rules - as I said , no combination
> I have tried works
> 
> // for outbound connections
> subnet -> subnet[21] out
> subnet[21] -> subnet in
> // for inbound connections
> subnet[21] -> subnet out
> subnet -> subnet[21] in

If you want them to each use distinct SAs, then 1/2/3/4 or any
four distinct reqid's will do.  The point is that you should set
the reqid on the policy yourself instead of having the kernel pick
one for you at random.  Then you know what to assign to your SAs
when you create those.

Cheers,
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@gondor.apana.org.au>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt
--
To unsubscribe from this list: send the line "unsubscribe netdev" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html