Cyclades AlterPath ACS, Справочник по командам

Страница: 163 / 420

AlterPath ACS Command Reference Guide
147
Network
•
espauthkey: ESP authentication key.
•
espreplay_window: ESP replay-window setting. An integer from 0 to 64. Relevant
only if ESP authentication is being used.
•
ah: AH authentication algorithm to be used for the connection, e.g. hmac-md5-96.
Default is not to use AH.
•
ahkey: Required if ah is present. AH authentication key
•
ahreplay_window: AH replay-window setting. An integer from 0 to 64.
Config Section
At present, the only config section known to the IPsec software is the one named setup,
which contains information used when the software is being started. Here's an example:
Parameters are optional unless marked required. The currently-accepted parameter
names in a config setup section are:
•
interfaces: Required. Virtual and physical interfaces for IPsec to use: a single
virtual= physical pair, a quoted list of pairs separated by white space, or
%defaultroute, which means to find the interface d that the default route points to,
and then act as if the value was ipsec0=d.
•
forwardcontrol: Whether setup should turn IP forwarding on (if it's not already on)
as IPsec is started, and turn it off again (if it was off) as IPsec is stopped.
Acceptable values are yes and (the default) no.
•
klipsdebug: How much KLIPS debugging output should be logged. An empty
value, or the magic value none, means no debugging output (the default). The
magic value all means full output.
•
plutodebug: How much Pluto debugging output should be logged. An empty value,
or the magic value none, means no debugging output (the default). The magic
value all means full output.
•
dumpdir: In what directory should things started by setup (notably the Pluto
daemon) be allowed to dump core. The empty value (the default) means they are
not allowed to.
•
manualstart: Which manually-keyed connections to set up at startup (can be empty,
a name, or a quoted list of names separated by white space).
•
plutoload: Which connections (by name) to load into Pluto's internal database at
startup (can be empty, a name, or a quoted list of names separated by white space);
see ipsec_auto for details. Default is none. If the special value %search is used, all
connections with auto=add, auto=route, or auto=start are loaded.
config setup
interfaces="ipsec0=eth1 ipsec1=ppp0"
klipsdebug=none
plutodebug=all
manualstart=
plutoload="snta sntb sntc sntd"
plutostart=
File Description 4.5: part of the /etc/ipsec.conf file