Some ipsec questions

[Pier <pierg75@yahoo.it>]

Hi.
I'm having some trouble trying to make a vpn ipsec between my debian firewall and a cisco asa.

The confs are like this:


192.168.1.0/24-----------1.1.1.1-----------2.2.2.2-----------10.13.10.x/24
my net                  my firewall        cisco asa          remote net


When the tunnel is down, if i try to ping from 192.168.1.0/24 to 10.13.10.x/24 the tunnel is not going up automatically, but instead i have to do a racoonctl cpn-connect 2.2.2.2.
Is that normal or i made something wrong?
Thanks

Pier