xref: /onnv-gate/usr/src/cmd/cmd-inet/etc/default/ipsec.dfl (revision 89:ba4d0152c0bd)
1*89Smeem#
2*89Smeem# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
3*89Smeem# Use is subject to license terms.
4*89Smeem#
5*89Smeem# CDDL HEADER START
6*89Smeem#
7*89Smeem# The contents of this file are subject to the terms of the
8*89Smeem# Common Development and Distribution License, Version 1.0 only
9*89Smeem# (the "License").  You may not use this file except in compliance
10*89Smeem# with the License.
11*89Smeem#
12*89Smeem# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
13*89Smeem# or http://www.opensolaris.org/os/licensing.
14*89Smeem# See the License for the specific language governing permissions
15*89Smeem# and limitations under the License.
16*89Smeem#
17*89Smeem# When distributing Covered Code, include this CDDL HEADER in each
18*89Smeem# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
19*89Smeem# If applicable, add the following below this CDDL HEADER, with the
20*89Smeem# fields enclosed by brackets "[]" replaced with your own identifying
21*89Smeem# information: Portions Copyright [yyyy] [name of copyright owner]
22*89Smeem#
23*89Smeem# CDDL HEADER END
24*89Smeem#
25*89Smeem# ident	"%Z%%M%	%I%	%E% SMI"
26*89Smeem#
27*89Smeem# IKE CONFIGURATION:
28*89Smeem# This file is read once by each in.iked process.
29*89Smeem#
30*89Smeem# IKE_CONFIG defines the default IKE config file pathname.  By default, it
31*89Smeem# is /etc/inet/ike/config
32*89Smeem#IKE_CONFIG=/etc/inet/ike/config
33*89Smeem#
34*89Smeem# IKE_DEBUG sets the initial debug level within the IKE daemon; by default,
35*89Smeem# no debug messages are logged.
36*89Smeem#IKE_DEBUG=
37*89Smeem#
38*89Smeem# IKE_DEBUG_FILE controls where IKE debug output goes if enabled.  By default,
39*89Smeem# it goes to stderr (the console, when started at boot time, which is usually
40*89Smeem# not what you want)
41*89Smeem#IKE_DEBUG_FILE=
42*89Smeem#
43*89Smeem# IKE_ADM_PRIV sets the ikeadm "privilege level", which determines how
44*89Smeem# much ikeadm is allowed to control while in.iked is running.
45*89Smeem# Possible values are:
46*89Smeem#		base			ikeadm may not change keys
47*89Smeem# 		modkeys			ikeadm may set keys.
48*89Smeem#		keymat			ikeadm may set and get keys.
49*89Smeem#IKE_ADM_PRIV=base
50*89Smeem
51*89Smeem
52*89Smeem
53