Re: IPsec vs ssh

[Mouse <mouse%Rodents-Montreal.ORG@localhost>]

> If I change "icmp" to "any", any currently established ssh sessions
> stop working.

I don't know enough about IPsec, but it strikes me as plausible, at
least, that this is because they are currently established.  Do new ssh
connections work, or do they fail too?

Or is it definitely supposed to work to reconfigure IPsec for
established connections without disrupting them?

/~\ The ASCII                             Mouse
\ / Ribbon Campaign
 X  Against HTML                mouse%rodents-montreal.org@localhost
/ \ Email!           7D C8 61 52 5D E7 2D 39  4E F1 31 3E E8 B3 27 4B