667646827e443761869735e9794e0f6500ac3502
gre-plus-ipsec-debian.md
| ... | ... | @@ -16,4 +16,14 @@ Example policy on 1.2.3.4: |
| 16 | 16 | #!/usr/sbin/setkey -f |
| 17 | 17 | spdadd 1.2.3.4 5.6.7.8 gre -P out ipsec esp/transport//require; |
| 18 | 18 | spdadd 5.6.7.8 1.2.3.4 gre -P in ipsec esp/transport//require; |
| 19 | -``` |
|
| ... | ... | \ No newline at end of file |
| 0 | +``` |
|
| 1 | + |
|
| 2 | +## Load the IPsec security policy into the IPsec security policy database |
|
| 3 | +Load the policy with the setkey command. |
|
| 4 | +``` |
|
| 5 | +setkey -f /etc/ipsec-tools.conf |
|
| 6 | +``` |
|
| 7 | +Afterward check the policy database with: |
|
| 8 | +``` |
|
| 9 | +setkey -DP |
|
| 10 | +``` |