1IPSEC_TNCFG(8) IPSEC_TNCFG(8)
2
3
4
6 ipsec tncfg - associate IPSEC virtual interface with physical interface
7
9 ipsec tncfg
10 ipsectncfg --attach --virtual virtual --physical physical
11 ipsectncfg --detach --virtual virtual
12 ipsectncfg --clear
13 ipsectncfg --version
14 ipsectncfg --help
15
16
18 Note that tncfg is only supported on the classic KLIPS stack. It is not
19 supported on any other stack and will be completely removed in future
20 versions. A replacement command still needs to be designed
21
22
24 Tncfg attaches/detaches IPSEC virtual interfaces to/from physical in‐
25 terfaces, through which packets will be forwarded once processed by
26 IPSEC.
27
28
29 The form with no additional arguments lists the contents of
30 /proc/net/ipsec_tncfg. The format of /proc/net/ipsec_tncfg is discussed
31 in ipsec_tncfg(5). The --attach form attaches the virtual interface to
32 the physical one. The --detach form detaches the virtual interface from
33 whichever physical interface it is attached to. The --clear form clears
34 all the virtual interfaces from whichever physical interfaces they were
35 attached to.
36
37
38 Virtual interfaces typically have names like ipsec0, while physical in‐
39 terfaces typically have names like eth0 or ppp0.
40
41
43 ipsec tncfg --attach --virtual ipsec0 --physical eth0
44 attaches the ipsec0 virtual device to the eth0 physical device.
45
46
48 /proc/net/ipsec_tncfg, /usr/local/bin/ipsec
49
50
52 ipsec(8), ipsec_manual(8), ipsec_eroute(8), ipsec_spi(8), ipsec_spi‐
53 grp(8), ipsec_klipsdebug(8), ipsec_tncfg(5)
54
55
57 Written for the Linux FreeS/WAN project <http://www.freeswan.org/:
58 http://www.freeswan.org/> by Richard Guy Briggs.
59
60
61
62
63 IPSEC_TNCFG(8)