Re: IPsec xfrm resolution

[Herbert Xu <herbert@xxxxxxxxxxxxxxxxxxx>]

On Sat, Feb 19, 2005 at 07:47:11PM +0100, Patrick McHardy wrote:
>
> >That's a bug.  How can you forward packets properly if the tunnel mode
> >SA is missing?
>
> Using normal routing. What meaning would "optional" have otherwise ?
> If the encapsulation has to be done, the user shouldn't mark the SA
> as optional in my opinion.

In that case you can't mark IPCOMP SAs as optional in this scenario
which is the most common application of optional:

IPCOMP(tunnel) -- ESP(transport)
-- 
Visit Openswan at http://www.openswan.org/
Email: Herbert Xu ~{PmV>HI~} <herbert@xxxxxxxxxxxxxxxxxxx>
Home Page: http://gondor.apana.org.au/~herbert/
PGP Key: http://gondor.apana.org.au/~herbert/pubkey.txt