Cyclades AlterPath ACS, Command Reference Manual

Page: 157 / 420

AlterPath ACS Command Reference Guide
141
Network
Adding and Removing a Connection
All the connections can be loaded to the IPsec database at boot time if these connections
have the auto parameter set to add. However if a certain connection doesn't have this
option set and you wish to add this connection manually you can use the following
command:
# /usr/local/sbin/ipsec auto --add <connection name>
Similarly, to take a connection out of the IPsec database you can use the command:
# /usr/local/sbin/ipsec auto --delete <connection name>
Once a connection descriptor is in the IPsec internal database, IPsec will accept the other
end to start the security connection negotiation. You can also start its negotiation as
explained in the next section.
Starting and Stopping a Connection
All the connections can be negotiated at boot time if these connections have the auto
parameter set to start . However if a certain connection doesn't have this option set, you
can set it. Once a connection descriptor is in the IPsec internal database, you can start its
negotiation using the command:
# /usr/local/sbin/ipsec auto --up <connection name>
Similarly to close a tunnel you use the command:
# /usr/local/sbin/ipsec auto --down <connection name>
Below you can see the output of a successful up operation:
[root@acs_cas root]# ipsec auto --up test
104 "test" #5: STATE_MAIN_I1: initiate
106 "test" #5: STATE_MAIN_I2: sent MI2, expecting MR2
108 "test" #5: STATE_MAIN_I3: sent MI3, expecting MR3
004 "test" #5: STATE_MAIN_I4: ISAKMP SA established
112 "test" #6: STATE_QUICK_I1: initiate
004 "test" #6: STATE_QUICK_I2: sent QI2, IPsec SA established