Black Box ACS120 User's Guide download pdf (Page 377)

100

101

Appendix G - IPSEC

User Guide 377

The variables set here are:

interfaces Tells the IPsec code in the Linux kernel which network interface

to use. The interfaces specified here are the only ones this

gateway machine will use to communicate with other IPsec

gateways. If this is not correct, nothing works. In many cases, the

appropriate interface is just your default connection to the world

(the Internet, or your corporate network). In these cases, you

can use the default setting: interfaces=%defaultroute. To check

what IPsec sees as the default route, you can use the command

ipsec showdefaults. You may need to compare this with the

output from netstat -rn to get a more complete picture. In other

cases, you can name one or more specific interfaces to be used

by IPsec. For example: interfaces="ipsec0=eth0" or

interfaces="ipsec0=eth0 ipsec1=ppp0". Both tell IPsec to use

eth0 as ipsec0. The second one also supports IPsec over PPP.

Note that multiple tunnels do not require multiple interfaces. It is

possible, and even common, to have one IPsec interface carrying

traffic for many tunnels. If you need to discover interface names,

use the command: ifconfig.

klipsdebug Debugging setting for the IPsec kernel code

plutodebug Debugging setting for the IPsec key and connection negotiation

daemon. klipsdebug and plutodebug can each be set to "none" or

to "all" in most circumstances.

plutoload List of connections to be automatically loaded into memory

when Pluto starts.

1 2 ... 372 373 374 375 376 377 378 379 380 381 382 ... 449 450

Comments to this Manuals

No comments

Black Box ACS120 User's Guide Page 377

Comments to this Manuals