Charles Steinkuehler's LEAF/LRP Website

IPSEC_SETUP

Section: Maintenance Commands (8)
Updated: 12 Dec 1999
Index Return to Main Contents

NAME

ipsec setup - control IPSEC subsystem

SYNOPSIS

ipsec setup command

DESCRIPTION

Setup controls the FreeS/WAN IPSEC subsystem, including both the Klips kernel code and the Pluto key-negotiation daemon. (It is a synonym for the ``rc'' script for the subsystem; the system runs the equivalent of ipsec setup start at boot time, and ipsec setup stop at shutdown time, more or less.)

The action taken depends on the specific command, and on the contents of the config setup section of the IPSEC configuration file (/etc/ipsec.conf, see ipsec.conf(5)). Current commands are:

start: start Klips and Pluto, including setting up Klips to do crypto operations on the interface(s) specified in the configuration file, and (if the configuration file so specifies) setting up manually-keyed connections and/or asking Pluto to negotiate tunnels to other security gateways
stop: shut down Klips and Pluto, including tearing down all existing crypto connections
restart: equivalent to stop followed by start

The stop operation tries to clean up properly even if assorted accidents have occurred, e.g. Pluto having died without removing its lock file.

Although a number of configuration-file parameters influence setup's operations, the key one is the interfaces parameter, which must be right or chaos will ensue.

FILES

/etc/rc.d/init.d/ipsec  the script itself

/etc/init.d/ipsec      alternate location for the script

/etc/ipsec.conf        IPSEC configuration file

/var/run/ipsec.info    %defaultroute saved information

DIAGNOSTICS

All output from the commands this script invokes goes both to standard output and to syslogd(8) via logger(1).

HISTORY

Written for the FreeS/WAN project <http://www.xs4all.nl/~freeswan/> by Henry Spencer.

BUGS

Logger(1) injects spurious extra newlines into the output.

This document was created by man2html, using the manual pages.
Time: 21:22:50 GMT, February 08, 2000

Content-type: text/html