Problem with Racoon/IPSec/Setkey - Routing to/from multiple netwo rks

[Helge Oldach]

Jamie Heckford:
>/usr/sbin/setkey -c << EOF
>flush;
>spdflush;
>spdadd ${LOCAL_NETWORK} ${STJUST_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${STJUST_OUTSIDE}/require;
>spdadd ${STJUST_NETWORK} ${LOCAL_NETWORK} any -P in  ipsec
>esp/tunnel/${STJUST_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>spdadd ${ALLNET_1} ${STJUST_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${STJUST_OUTSIDE}/require;
>spdadd ${STJUST_NETWORK} ${ALLNET_1} any -P in  ipsec
>esp/tunnel/${STJUST_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>spdadd ${LOCAL_NETWORK} ${BENELUX_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${BENELUX_OUTSIDE}/require;
>spdadd ${BENELUX_NETWORK} ${LOCAL_NETWORK} any -P in ipsec
>esp/tunnel/${BENELUX_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>spdadd ${ALLNET_1} ${BENELUX_NETWORK} any -P out ipsec
>esp/tunnel/${LOCAL_OUTSIDE}-${BENELUX_OUTSIDE}/require;
>spdadd ${BENELUX_NETWORK} ${ALLNET_1} any -P in ipsec
>esp/tunnel/${BENELUX_OUTSIDE}-${LOCAL_OUTSIDE}/require;
>EOF

Try using "unique" instead of "require".

Helge