IPSEC_STARTER(8)

NAME
ipsec starter - crank up the IPsec keying daemon and environment

SYNOPSIS
ipsec starter [ --debug ] [ --auto_reload seconds ]

Openswan Starter is aimed to replace all the scripts which are used to start and stop Openswan and to do that in a quicker and a smarter way.

It can also reload the configuration file (kill --HUP or periodicaly) and apply the changes.

What it will do:

Load and unload klips (ipsec kernel module)

Launch and monitor pluto.

Add, initiate, route and delete connections

Attach and detach interfaces according to config file

kill -HUP can be used to reload the config file. New connections will be added, old ones will be removed and modified ones will be reloaded. Interfaces/Klips/Pluto will be reloaded if necessary.

Upon startup, starter will save its pid to the file /var/run/starter.pid

Upon reloading, dynamic DNS addr will be resolved and reloaded. Use --auto_reload to periodicaly check dynamic DNS changes.

kill -USR1 can be used to reload all connections (delete then add and route/initiate).

/var/run/dynip/xxxx can be used to use a virtual interface name in ipsec.conf. By example, when adsl can be ppp0, ppp1, or some such, one can do ipsec.conf: interfaces="ipsec0=adsl" And use /etc/ppp/ip-up to create /var/run/dynip/adsl
    /var/run/dynip/adsl: IP_PHYS=ppp0

%auto can be used to automaticaly name the connections

kill -TERM can be used to stop FS. pluto will be stopped and klips unloaded (if it has been loaded).

  seconds.

FILES
/etc/ipsec.conf

SEE ALSO
ipsec(8), ipsec_tncfg(8), ipsec_pluto(8)

HISTORY
Original by mlafon@arkoon.net for Arkoon Network Security. Updated for FreeS/WAN version 2 by Michael Richardson <mcr@sandelman.ottawa.on.ca>. Merged into Openswan 2.2 by Xelerance Corporation

TODO/BUGS

handle wildcards in include lines -- use glob() fct ex: include /etc/ipsec.*.conf

handle duplicates keywords and sections

add unsupported keywords

manually keyed connections

%defaultroute

IPv6