That's the way FreeS/WAN does it.
Yes, I know that's the way FreeS/WAN implements it. But it doesn't mean it is the only way it can be implemented. Actually, I like better Linux 2.6 implementation that doesn't use virtual devices.
-- Aleksandar Milivojevic <amilivojevic@xxxxxx> Pollard Banknote Limited Systems Administrator 1499 Buffalo Place Tel: (204) 474-2323 ext 276 Winnipeg, MB R3T 1L7
