Re: Allow ipsecctl-like grouping in iked(8)

2011-05-20 Thread Vadim Zhukov
On 20 May 2011 c. 18:54:02 Reyk Floeter wrote: > hi, > > On Thu, May 19, 2011 at 11:06:44PM +0400, Vadim Zhukov wrote: > > This patch allows ipsecctl-like flow grouping along with current > > behavior. It allows to write many-to-many policies in a more > > compact way, see an example: > > > > ike

Re: Allow ipsecctl-like grouping in iked(8)

2011-05-20 Thread Reyk Floeter
hi, On Thu, May 19, 2011 at 11:06:44PM +0400, Vadim Zhukov wrote: > This patch allows ipsecctl-like flow grouping along with current > behavior. It allows to write many-to-many policies in a more > compact way, see an example: > > ikev2 esp \ > from { 1.2.3.4, 5.6.7.8 } to { 3.4.5.6, 4.5.6.

Allow ipsecctl-like grouping in iked(8)

2011-05-19 Thread Vadim Zhukov
Hello all. This patch allows ipsecctl-like flow grouping along with current behavior. It allows to write many-to-many policies in a more compact way, see an example: ikev2 esp \ from { 1.2.3.4, 5.6.7.8 } to { 3.4.5.6, 4.5.6.7} \ from 7.8.9.0 to { 0.1.2.3, 2.3.4.5 } \ ... will creat