Content-type: text/html
Manpage of IPSEC_SETUP
IPSEC_SETUP
Section: Maintenance Commands (8)
Updated: 12 Dec 1999
Index
Return to Main Contents
NAME
ipsec setup - control IPSEC subsystem
SYNOPSIS
ipsec
setup
command
DESCRIPTION
Setup
controls the FreeS/WAN IPSEC subsystem,
including both the Klips kernel code and the Pluto key-negotiation daemon.
(It is a synonym for the ``rc'' script for the subsystem;
the system runs the equivalent of
ipsec setup start
at boot time,
and
ipsec setup stop
at shutdown time, more or less.)
The action taken depends on the specific
command,
and on the contents of the
config
setup
section of the
IPSEC configuration file (/etc/ipsec.conf,
see
ipsec.conf(5)).
Current
commands
are:
- start
-
start Klips and Pluto,
including setting up Klips to do crypto operations on the
interface(s) specified in the configuration file,
and (if the configuration file so specifies)
setting up manually-keyed connections and/or
asking Pluto to negotiate tunnels to other security gateways
- stop
-
shut down Klips and Pluto,
including tearing down all existing crypto connections
- restart
-
equivalent to
stop
followed by
start
The
stop
operation tries to clean up properly even if assorted accidents
have occurred,
e.g. Pluto having died without removing its lock file.
Although a number of configuration-file parameters influence
setup's
operations, the key one is the
interfaces
parameter, which must be right or chaos will ensue.
FILES
/etc/rc.d/init.d/ipsec the script itself
/etc/init.d/ipsec alternate location for the script
/etc/ipsec.conf IPSEC configuration file
/var/run/ipsec.info %defaultroute saved information
SEE ALSO
ipsec.conf(5), ipsec(8), ipsec_manual(8), ipsec_auto(8), route(8)
DIAGNOSTICS
All output from the commands this script invokes goes both to standard
output and to
syslogd(8)
via
logger(1).
HISTORY
Written for the FreeS/WAN project
<http://www.xs4all.nl/~freeswan/>
by Henry Spencer.
BUGS
Logger(1)
injects spurious extra newlines into the output.
Index
- NAME
-
- SYNOPSIS
-
- DESCRIPTION
-
- FILES
-
- SEE ALSO
-
- DIAGNOSTICS
-
- HISTORY
-
- BUGS
-
This document was created by
man2html,
using the manual pages.
Time: 02:46:48 GMT, July 02, 2000