On Thu, 2006-07-27 at 16:36 +0200, Marco Berizzi wrote: > Andy Gay wrote: > > >It's a function of the IPsec SADB. (That should have beed SPDB, of course... :)
> The passthrough conn added a more > >specific policy that will match before the tunnel policy. > >You can run 'ip xfrm p' and 'ip xfrm s' to view the policies & state > >info. > > I did, but no results: > > ip x p | grep '172.16.1.253' > > nor > > ip x s | grep '172.16.1.253' > As Herbert said, the right= address doesn't matter. Search for 10.180. BTW - in your erlier mail you had "rightsubnet=10.180.0./16". Looks like a typo there. - To unsubscribe from this list: send the line "unsubscribe netdev" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
