xref: /netbsd-src/share/man/man5/ipsec.conf.5 (revision 42704c41c968683d823b98a413fddb89a06f262b)
1*42704c41Swiz.\"	$NetBSD: ipsec.conf.5,v 1.3 2001/09/11 01:01:57 wiz Exp $
2f7617b4aShubertf.\"
3f7617b4aShubertf.\" Copyright (c) 2001 The NetBSD Foundation, Inc.
4f7617b4aShubertf.\" All rights reserved.
5f7617b4aShubertf.\"
6f7617b4aShubertf.\" This document is derived from works contributed to The NetBSD Foundation
7f7617b4aShubertf.\" by Hubert Feyrer.
8f7617b4aShubertf.\"
9f7617b4aShubertf.\" Redistribution and use in source and binary forms, with or without
10f7617b4aShubertf.\" modification, are permitted provided that the following conditions
11f7617b4aShubertf.\" are met:
12f7617b4aShubertf.\" 1. Redistributions of source code must retain the above copyright
13f7617b4aShubertf.\"    notice, this list of conditions and the following disclaimer.
14f7617b4aShubertf.\" 2. Redistributions in binary form must reproduce the above copyright
15f7617b4aShubertf.\"    notice, this list of conditions and the following disclaimer in the
16f7617b4aShubertf.\"    documentation and/or other materials provided with the distribution.
17f7617b4aShubertf.\" 3. The name of the author may not be used to endorse or promote products
18f7617b4aShubertf.\"    derived from this software without specific prior written permission.
19f7617b4aShubertf.\"
20f7617b4aShubertf.\" THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
21f7617b4aShubertf.\" IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
22f7617b4aShubertf.\" OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
23f7617b4aShubertf.\" IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
24f7617b4aShubertf.\" INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
25f7617b4aShubertf.\" BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
26f7617b4aShubertf.\" LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
27f7617b4aShubertf.\" AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
28f7617b4aShubertf.\" OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29f7617b4aShubertf.\" OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30f7617b4aShubertf.\" SUCH DAMAGE.
31f7617b4aShubertf.\"
32f7617b4aShubertf.Dd February 19, 2001
33f7617b4aShubertf.Dt IPSEC.CONF 5
34f7617b4aShubertf.Os
35f7617b4aShubertf.Sh NAME
36f7617b4aShubertf.Nm ipsec.conf
37f7617b4aShubertf.Nd static IPsec configuration read at system startup
38f7617b4aShubertf.Sh DESCRIPTION
39f7617b4aShubertfThe
40f7617b4aShubertf.Nm
41f7617b4aShubertffile is read at system startup time if
42f7617b4aShubertf.Sy ipsec
43f7617b4aShubertfis set to
44f7617b4aShubertf.Dq yes
45f7617b4aShubertfin
46f7617b4aShubertf.Xr rc.conf 5 .
47f7617b4aShubertf.Xr setkey 8
48f7617b4aShubertfis run with the
49f7617b4aShubertf.Fl f
50f7617b4aShubertfoption to load in IPsec manual keys and policies from
51f7617b4aShubertf.Pa /etc/ipsec.conf
52f7617b4aShubertfat boot time, before any interfaces are configured.
53f7617b4aShubertf.Pp
54f7617b4aShubertfPlease see the
55f7617b4aShubertf.Xr setkey 8
56f7617b4aShubertfmanpage for all the commands available.
57f7617b4aShubertf.Sh FILES
58f7617b4aShubertf.Bl -tag -width /etc/ipsec.conf -compact
59f7617b4aShubertf.It Pa /etc/ipsec.conf
60f7617b4aShubertfThe file
61f7617b4aShubertf.Nm
62f7617b4aShubertfresides in
63f7617b4aShubertf.Pa /etc .
64f7617b4aShubertf.El
65f7617b4aShubertf.Sh SEE ALSO
66*42704c41Swiz.Xr ipsec 4 ,
67*42704c41Swiz.Xr setkey 8
68f7617b4aShubertf.Sh HISTORY
69f7617b4aShubertfThe
70f7617b4aShubertf.Nm
71f7617b4aShubertffile appeared in
72f7617b4aShubertf.Nx 1.5 .
73