racoon

#!/bin/sh /etc/rc.common
# Copyright (C) 2009-2011 OpenWrt.org
# Copyright (C) 2011 Artem Makhutov

START=49

SERVICE_USE_PID=1

start() {
        mkdir -m 0700 -p /var/racoon
 . /lib/functions/network.sh
        network_get_ipaddr wan_ip wan

/usr/sbin/setkey -c <<EOF

flush;
spdflush;

# All tunnels to this host shall use ESP transport mode
spdadd $wan_ip[l2tp] 0.0.0.0/0 udp -P out ipsec esp/transport//require;
spdadd 0.0.0.0/0 $wan_ip[l2tp] udp -P in ipsec esp/transport//require;

EOF
        service_start /usr/sbin/racoon -f /etc/racoon.conf
}

stop() {
        service_stop /usr/sbin/racoon
}