[Swan] What ways're possible for bringing a VTI up?

[Alex K.]

Hello everyone,

What are the possible ways to bring a Libreswan VTI up?

Let me elaborate the situation a little bit - I have a Libreswan 3.21
compiled from sources on Debian Stretch as. Anyhow, I have a basic VTI
setup according to the example on Libreswan website.

On system startup, everything works just fine. The question is, how can I
bring the tunnel up (after say, a restart to the opposite end), *without*
manual intervention?

Sure, I can always get to the box, get the terminal up and run "sudo ipsec
auto --add vti1", following "--up". But say I'm not on site right now or
wish to plan for better VPN recovery setup, what are my possibilities? Can
some traffic bring the VTI up? Is there a keep alive/always up setting?

Any suggestion will be welcomed.

And by the way, thank you for wonderful product.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.libreswan.org/pipermail/swan/attachments/20180118/485a927b/attachment.html>