Appendix G - IPSEC
User Guide
375
The software parts
The IPsec software has three main parts:
IPSec Configuration
The configuration file
IPsec uses a configuration file, ipsec.conf. This section describes setting up the parts of that
file that apply to all connections:
This section also gives an introduction to the parts of the file that specify the actual connec-
tions. The following section covers setting up a conventional VPN connection using auto-
matic keying with RSA authentication of the gateways.
General comments on ipsec.conf
The ipsec.conf file is divided into sections, and the following rules apply:
1.
The '#' character marks a comment.
2.
The first uncommented line of a section must be at the margin, and must not be
indented.
KLIPS (kernel IPsec)
Implements the IPsec code in the Linux kernel.
PLUTO
The user space IPsec. It negotiate connections with other
systems.
scripts
Various scripts provide and administrator interface to the
machinery.
Config setup section
This describes machine configuration.
Conn default section
Default parameters which apply to all connections.
