iked (8)

Leading comments

Copyright (c) 2007
     Shrew Soft Inc.  All rights reserved.

Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions
are met:
1. Redistributions of source code must retain the above copyright
   notice, this list of conditions and the following disclaimer.
2. Redistributions in binary form must reproduce the above copyright
   notice, this list of conditions and the following disclaimer in the
   documentation and...

(The comments found at the beginning of the groff file "man8/iked.8".)

NAME

iked - Internet Key Exchange Daemon

SYNOPSIS

[-f cfgfile ] [-l logfile ] [-d level ] [-F ]

DESCRIPTION

The program communicates using the IKE protocol ( RFC 2409 ) to provide automatic keying for an IPsec capable host. The daemon communicates with the host os via PF_KEY ( RFC 2367 ) to obtain the local policy configuration and to receive key aquisition requests. The daemon is also capable of acting as a client or client gateway and can create appropriate IPsec policy entries on bahalf of the host or peer to faclilitate remote access IPsec VPN connectivity. For more informaiton, please see the ikea(1) and ikec(1) man pages.

The options are as follows:

-f cfgfile

Specify an alternate configuration file.

-l logfile

Specify a log output file.

-d level

Specify debug output level between 0-6.

-p pidfile

Spefify a process id file.

-F

Run the program as a foreground application.

RETURN VALUES

The command exits with 0 on success, and non-zero on errors.

FILES

The default configuration file is /etc/iked.conf

SEE ALSO

ikea(1), ikec(1), ipsec(4), iked.conf5, setkey(8)

HISTORY

The program was written by Matthew Grooms ( mgrooms@shrew.net ) as part of the Shrew Soft ( www.shrew.net ) family of IPsec products.