. ${DIR}/tun_aesgcm_common_defs.sh
-SGW_CMD_XPRM='-w 300'
+SGW_CMD_XPRM='-w 300 -l'
config_remote_xfrm()
{
ssh ${REMOTE_HOST} ip xfrm policy list
ssh ${REMOTE_HOST} ip xfrm state list
-
- # to overcome problem with ipsec-secgw for inline mode,
- # when first packet(s) will be always dropped.
- # note that ping will fail here
- ssh ${REMOTE_HOST} ping -c 1 ${LOCAL_IPV4}
}
config6_remote_xfrm()
ssh ${REMOTE_HOST} ip xfrm policy list
ssh ${REMOTE_HOST} ip xfrm state list
-
- # to overcome problem with ipsec-secgw for inline mode,
- # when first packet(s) will be always dropped.
- # note that ping will fail here
- ssh ${REMOTE_HOST} ping6 -c 1 ${LOCAL_IPV6}
}