Content-type: text/html Man page of IPSEC_STARTER

IPSEC_STARTER

Section: Maintenance Commands (8)
Updated: 23 Oct 2001
Index Return to Main Contents
 

NAME

ipsec starter - crank up the IPsec keying daemon and environment  

SYNOPSIS

ipsec starter [ --debug ] [ --auto_reload seconds ]

Openswan Starter is aimed to replace all the scripts which are used to start and stop Openswan and to do that in a quicker and a smarter way.

It can also reload the configuration file (kill --HUP or periodicaly) and apply the changes.

What it will do:

Load and unload klips (ipsec kernel module)

Launch and monitor pluto.

Add, initiate, route and delete connections

Attach and detach interfaces according to config file

kill -HUP can be used to reload the config file. New connections will be added, old ones will be removed and modified ones will be reloaded. Interfaces/Klips/Pluto will be reloaded if necessary.

Upon startup, starter will save its pid to the file /var/run/starter.pid

Upon reloading, dynamic DNS addr will be resolved and reloaded. Use --auto_reload to periodicaly check dynamic DNS changes.

kill -USR1 can be used to reload all connections (delete then add and route/initiate).

/var/run/dynip/xxxx can be used to use a virtual interface name in ipsec.conf. By example, when adsl can be ppp0, ppp1, or some such, one can do ipsec.conf: interfaces=ipsec0=adsl And use /etc/ppp/ip-up to create /var/run/dynip/adsl
    /var/run/dynip/adsl:    IP_PHYS=ppp0

%auto can be used to automaticaly name the connections

kill -TERM can be used to stop FS. pluto will be stopped and klips unloaded (if it has been loaded).


  seconds.

 

FILES

/etc/ipsec.conf  

SEE ALSO

ipsec(8), ipsec_tncfg(8), ipsec_pluto(8)  

HISTORY

Original by mlafon@arkoon.net for Arkoon Network Security. Updated for FreeS/WAN version 2 by Michael Richardson <mcr@sandelman.ottawa.on.ca>. Merged into Openswan 2.2 by Xelerance Corporation  

TODO/BUGS

handle wildcards in include lines -- use glob() fct ex: include /etc/ipsec.*.conf

handle duplicates keywords and sections

add unsupported keywords

manually keyed connections

%defaultroute

IPv6


 

Index

NAME
SYNOPSIS
FILES
SEE ALSO
HISTORY
TODO/BUGS

This document was created by man2html, using the manual pages.
Time: 19:15:26 GMT, May 24, 2005