Description of problem: The above URL suggests two configuration parameters SRCGW and DSTGW, however these two are never used in /etc/sysconfig/network-scripts/ifup-ipsec Version-Release number of selected component (if applicable): RHEL4
They shouldn't be necessary, no. SRCGW may be needed for setting a route, but it can be automatically computed.
Thanks for the info, Bill. Apparently, the fields are optional (though, puzzlingly, they are required fields in the IPSEC druid in system-config-network). In any event, the next release of the Red Hat Enterprise Linux Security Guide will state that these fields are optional. Thanks for your report.