
Appendix G - IPSEC
402 BLACK BOX ® Advanced Console Server
Config Sections
At present, the only config section known to the IPsec software is the one named setup,
which contains information used when the software is being started. Here's an example:
config setup
interfaces="ipsec0=eth1 ipsec1=ppp0"
klipsdebug=none
plutodebug=all
manualstart=
plutoload="snta sntb sntc sntd"
plutostart=
esp ESP encryption/authentication algorithm to be used for the connec-
tion, e.g. 3des-md5-96.
espenckey ESP encryption key.
espauthkey ESP authentication key.
espreplay_window ESP replay-window setting. An integer from 0 to 64. Relevant only if
ESP authentication is being used.
leftespspi SPI to be used for the leftward ESP SA, overriding automatic assign-
ment using spi or spibase. Typically a hexadecimal number begin-
ning with 0x.
ah AH authentication algorithm to be used for the connection, e.g.
hmac-md5-96. Default is not to use AH.
ahkey Required if ah is present. AH authentication key
ahreplay_window AH replay-window setting. An integer from 0 to 64.
leftahspi SPI to be used for the leftward AH SA, overriding automatic assign-
ment using spi or spibase. Typically a hexadecimal number begin-
ning with 0x.
Komentáře k této Příručce