1spmdctl(8) spmdctl(8)
2
3
4
6 spmdctl - Control spmd
7
9 spmdctl [option] COMMAND
10
12 spmdctl connects to the spmd interface which is specified in racoon2
13 configuration file, and requests operation to spmd.
14 Available operations are:
15
16 set, get, and delete DNS server address(es) for spmd DNS proxy
17 function.
18
19 add IPsec Policy.
20
21 get spmd statistics.
22
23 The following options are available:
24
25 -d Display all messages which exchanged with spmd.
26
27 -f FILE
28 Specify racoon2 configuration file name FILE.
29
30 The following COMMANDs are available:
31
32 ns add ADDRESS
33
34 Add DNS server address ADDRESS to spmd DNS server list.
35
36
37 ns delete ADDRESS
38
39 Delete DNS server address ADDRESS from spmd DNS server list.
40
41
42 ns list
43
44 Show DNS server address(es) in spmd DNS Server list. Top line
45 is currently used.
46
47
48 policy add SELECTOR_INDEX LIFETIME {transport|tunnel| SP_SRC_IPADDR
49 SP_DST_IPADDR [SA_SRC_IP_ADDR SA_DST_IPADDR]
50
51 Request spmd to add IPsec Security Policy to in-kernel IPsec
52 Security Policy DataBase(SPD).
53
54 SELECTOR_INDEX is a selector index string which described in
55 racoon2 configuration file.
56
57 LIFETIME is the lifetime duration(sec) for this IPsec Security
58 Policy.
59
60 transport|tunnel transport means this IPsec Security Policy is
61 transport mode. tunnel means tunnel mode.
62
63 SP_SRC_IPADDR is the source IP address for this IPsec Security
64 Policy.
65
66 SP_DST_IPADDR is the destination IP address for this IPsec Secu‐
67 rity Policy.
68
69 SA_SRC_IPADDR is the IPsec SA source IP address associated with
70 this IPsec Security Policy. This is only required in tunnel
71 mode.
72
73 SA_DST_IPADDR is the IPsec SA destination IP address associated
74 with this IPsec Security Policy. This is only required in tunnel
75 mode.
76
77
78 policy delete SELECTOR_INDEX
79
80 Request spmd to delete IPsec Security Policy to in-kernel IPsec
81 Security DataBase(SPD).
82
83 SELECTOR_INDEX is a selector index string which described in
84 racoon2 configuration file.
85
86
87 policy show
88
89 Dump IPsec Security Policies. If 'selector=' field is empty in
90 a displayed IPsec Security Policy entry, this Policy is out of
91 racoon2 management.
92
93
94 interactive
95 Connect to spmd and just login. You can talk to spmd directly.
96 This command is available when you compiled spmdctl with
97 DEBUG_SPMD.
98
99
100 status Show spmd statistics.
101
103 racoon2.conf
104
106 WIDE Project, racoon2 project <http://www.racoon2.wide.ad.jp/>
107
109 policy add command currently doesn't support tunnel mode.
110
112 spmd(8) racoon2.conf(5) racoon2(7).
113
114
115
116 20050624 spmdctl(8)