Re: [PATCH] IPSec protocol application order

[Tom Lendacky]

> setkey is for manual keying and debugging.  Therefore, disallowing
> experimenting with non-rfc-compliant orderings seems to lack purpose
> to me.

I apologize if I missed it, but is there another way to set policy in the
SPD besides the setkey command?  I am under the assumption that setkey's
spdadd operation is what is to be used to define the policy on the system
so that racoon can perform dynamic keying.

Tom