IPSEC_ADDCONN
Section: Executable programs (8)
Updated: 02/03/2021
Page Index
NAME
ipsec_addconn - load a given policy into the pluto IKE daemon
SYNOPSIS
-
ipsec addconn --configsetup [--rootdir dir] [--config filename] [--ctlbase socketfile] [--verbose] [--noexport] [--warningsfatal]
-
ipsec addconn --liststack [--rootdir dir] [--config filename] [--ctlbase socketfile] [--verbose] [--noexport] [--warningsfatal]
-
ipsec addconn --checkconfig [--rootdir dir] [--config filename] [--ctlbase socketfile] [--verbose] [--warningsfatal]
-
ipsec addconn --autoall [--rootdir dir] [--config filename] [--ctlbase socketfile] [--verbose] [--warningsfatal]
-
ipsec addconn [--rootdir dir] [--config filename] [--ctlbase socketfile] [--verbose] [--warningsfatal] name1 [name2 ..]
-
ipsec addconn [--listall] [--liststart] [--listroute] [--listadd] [--listignore] [--rootdir dir] [--config filename] [--ctlbase socketfile] [--verbose] [--warningsfatal]
-
ipsec addconn --help
DESCRIPTION
ipsec addconn
takes a config file (or stdin) containing the format of ipsec.conf, or the format of individual "conn" sections, and uses that information to load named or all connections defined in that configuration file into the running libreswan pluto IKE daemon. If no configuration file is specified, the default configuration file is used. If no pluto socket is specified, the default socket location will be used.
When
--addall
is used, all connections defined in the config file will be operated on. Otherwise, only the specified connection names will be affected.
When addcon is run, connections that have the
auto=
option set to
add,
start
or
route
will be loaded, routed or initiated. If a connection was loaded or initiated already, it will be replaced.
When
--configsetup
is specified, the configuration file is parsed for the
config setup
section and printed to the terminal usable as a shell script. These are prefaced with
export
unless
--noexport
is specified.
When
--checkconfig
is specified, the configuration file is parsed and all sections are checked for correct syntax. If an error is found, information about it is printed to the terminal.
When
--listroute
or
--liststart
is specified, no connections are added or replaced, only shown. This command can be used to verify which connections the addcon command would act upon, without actually performing any action.
HISTORY
Man page written for the Libreswan project <m[blue]https://libreswan.org/m[]> by Paul Wouters
AUTHOR
Paul Wouters
-
placeholder to suppress warning