Re: isakmpd: named pipe or pf_key?

[Håkan Olsson <ho@crt.se>]

The named pipe is for communicating with the isakmp-daemon, not directly
with "ipsec". You can, for example, do

# echo "c MyConnection" >> /var/run/isakmpd.fifo

to have isakmpd manually initiate the connection "MyConnection" (which has
to be specified in the configuration file, though).

This is not yet (oops) described in the manual page, but briefly,
available commands include;

  c - initiate connection
  t - teardown connection
  D - change debugging level
  r - generate report (same as sending a SIGUSR1 signal)
  d - delete SA
  C - modify configuration

c, t, D and r are fairly straightforward to use. d and C are not.

It may be that this API may change in the future.

//Håkan

--
Håkan Olsson <ho@crt.se>        (+46) 708 437 337     Carlstedt Research
Unix, Networking, Security      (+46) 31 701 4200        & Technology AB