Appendix G - IPSEC
404
BLACK BOX
®
Advanced Console Server
The IPsec Daemon
The ipsec daemon is automatically initialized when you first boot your Console Server equip-
ment after you have uncommented the IPsec lines in the /etc/inittab and /etc/config_files.
Rebooting your BLACK BOX
®
Advanced Console Server is not mandatory. However, you
can start the IPsec daemon by using the command:
/usr/local/sbin/ipsec setup
This program accepts the options: --start, --stop, and --restart.
Adding and Removing a Connection
All the connections can be loaded to the IPsec database at boot time if these connections
have the auto parameter set to
add
. However if a certain connection doesn't have this option
set and you wish to add this connection manually you can use the following command:
/usr/local/sbin/ipsec (auto/manual) --add <connection name>
You must use auto or manual depending on your connection keying type (manual/auto). Sim-
ilarly to take a connection out of the IPsec database you can use the command:
/usr/local/sbin/ipsec (auto/manual) --delete <connection name>
Once a connection descriptor is in the IPsec internal database, IPsec will accept the other
end to start the security connection negotiation. You can also start its negotiation as
explained in the next section.
Starting and Stopping a Connection
All the connections can be negotiated at boot time if these connections have the auto param-
eter set to start. However if a certain connection doesn't have this option set you can set it.
Once a connection descriptor is in the IPsec internal database, you can start its negotiation
using the command:
/usr/local/sbin/ipsec (auto/manual) --up <connection name>
Similarly to close a tunnel you use the command:
/usr/local/sbin/ipsec (auto/manual) --down <connection name>
