RT(1)

NAME
rt - create IPSec routing entries

SYNOPSIS
rt isrc isrcmask idst idstmask tproto sport dport raddr spi fespah

DESCRIPTION
The rt utility creates a routing entry for IPSec. A Security association must already be established with either photurisd(1) or ipsecadm(1). The arguments are:

isrc
    The initial source address.

isrcmask
    The network mask for the initial source address. The source address of outgoing packets has to match the address range specified by isrc and isrcmask to be routed through IPSec.

idst
    The initial destination address.

idstmask
    The network mask for the initial destination address. The destination address of outgoing packets has to match the address range specified by idst and idstmask to be routed through IPSec.

tproto
    The protocol number packets have to match to be routed. Specify -1 as wildcard.

sport
    The source port of a packet if applicable. Specify -1 as wildcard.

dport
    The destination port aof a packet if applicable. Specify -1 as wildcard.

raddr
    The destination address of the security association. If you dont use tunnel mode that will be the same as idst.

spi The Security Parameter Index of the security association.

fespah
    Specifies the security protocol of the SA. Use either 0 for AH or 1 for ESP.

EXAMPLE
Route packets for ESP in transport mode:

rt 0.0.0.0 255.255.255.255 remote 255.255.255.255 -1 -1 -1 remote SPI 1

rt localip 255.255.255.255 remote 255.255.255.255 -1 -1 -1 remote SPI 1

SEE ALSO
ipsecadm(1), /proc/net/ipsec-route(5), photurisd(1), rtdelete.