Some ipsec questions

Hi.
I'm having some trouble trying to make a vpn ipsec between my debian firewall and a cisco asa.

The confs are like this:

192.168.1.0/24-----------1.1.1.1-----------2.2.2.2-----------10.13.10.x/24
my net my firewall cisco asa remote net

When the tunnel is down, if i try to ping from 192.168.1.0/24 to 10.13.10.x/24 the tunnel is not going up automatically, but instead i have to do a racoonctl cpn-connect 2.2.2.2.
Is that normal or i made something wrong?
Thanks

Pier

--
To UNSUBSCRIBE, email to debian-firewall-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Archive: http://lists.debian.org/679476.31260.qm@web28612.mail.ukl.yahoo.com