I would like to deploy dhcp over ipsec with openswan 2.4.x running on linux 2.6.15.1. To achieve this solution I need dhcp relay agent running on the ipsec gateway box (there will be also the dhcp server on the same box). I'm using the native linux 2.6 ipsec (no KLIPS) so there is no virtual devices. ISC dhcp relay agent need to know which interface should listen (-i flag). With KLIPS I set '-i ipsecX' interface. What should I specify? This is my ipsec gateway diagram: +---------+ | OSW-2.4 | | DHCP-RA | ---eth0-public-ip---+ +---eth1-dmz-public-network | Linux | | 2.6.15 | +----+----+ | | | eth2-private-net TIA - : send the line "unsubscribe linux-net" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html