Appendix G - IPSEC
User Guide
377
The variables set here are:
interfaces
Tells the IPsec code in the Linux kernel which network interface
to use. The interfaces specified here are the only ones this
gateway machine will use to communicate with other IPsec
gateways. If this is not correct, nothing works. In many cases, the
appropriate interface is just your default connection to the world
(the Internet, or your corporate network). In these cases, you
can use the default setting: interfaces=%defaultroute. To check
what IPsec sees as the default route, you can use the command
ipsec showdefaults
. You may need to compare this with the
output from
netstat -rn
to get a more complete picture. In other
cases, you can name one or more specific interfaces to be used
by IPsec. For example: interfaces="ipsec0=eth0" or
interfaces="ipsec0=eth0 ipsec1=ppp0". Both tell IPsec to use
eth0 as ipsec0. The second one also supports IPsec over PPP.
Note that multiple tunnels do not require multiple interfaces. It is
possible, and even common, to have one IPsec interface carrying
traffic for many tunnels. If you need to discover interface names,
use the command: ifconfig.
klipsdebug
Debugging setting for the IPsec kernel code
plutodebug
Debugging setting for the IPsec key and connection negotiation
daemon. klipsdebug and plutodebug can each be set to "none" or
to "all" in most circumstances.
plutoload
List of connections to be automatically loaded into memory
when Pluto starts.
