Appendix G - IPSEC
384
BLACK BOX
®
Advanced Console Server
rightsubnet=192.168.0.0/24
IPsec Usage
The IPsec Daemon
The IPsec daemon (PLUTO) is the program that loads and negotiates the connections. To start
the IPsec daemon use the following command:
/usr/local/sbin/ipsec setup --start
Similarly, this command accepts the usual daemon commands as stop and restart.
The ipsec daemon is not automatically initialized when you boot your Console Server equip-
ment for the first time. If you want the IPsec to auto run on boot you must uncomment the
lines regarding the IPsec on the /etc/rc.sysinit script.
Adding and Removing a Connection
All the connections can be loaded to the IPsec database at boot time if these connections
have the auto parameter set to add. However if a certain connection doesn't have this option
set and you wish to add this connection manually you can use the following command:
/usr/local/sbin/ipsec auto --add <connection name>
Similarly, to take a connection out of the IPsec database you can use the command:
/usr/local/sbin/ipsec auto --delete <connection name>
Once a connection descriptor is in the IPsec internal database, IPsec will accept the other
end to start the security connection negotiation. You can also start its negotiation as
explained in the next section.
