1IPSEC_IKEPING(8)                                              IPSEC_IKEPING(8)
2
3
4

NAME

6       ipsec ikeping - send/receive ISAKMP/IKE echo requests/replies
7

SYNOPSIS

9       ipsec ikeping [--listen] [--verbose] [--wait time] [--exchangenum num]
10             [--ikeport localport] [--ikeaddress address] [--inet] [--inet6]
11             destaddr [/dstport...]
12
13

DESCRIPTION

15       Ikeping sends and receives ISAKMP/IKE echo request and echo reply pack‐
16       ets. These packets are intended for diagnostics purposes, in  a  manner
17       similar to ping(8) does for ICMP echo request/reply packets.
18
19
20       At  the time of this writing, the ISAKMP echo request/reply exchange is
21       still an internet-draft, and is therefore completely non-standard.
22
23
24       Ikeping will bind to the local address given by  --ikeaddress  and  the
25       port  number  given by --ikeport defaulting to the wildcard address and
26       the ISAKMP port 500. An ISAKMP exchange of type 244 (a private use num‐
27       ber)  is  sent to each of the address/ports listed on the command line.
28       The exchange number may be overridden by the --exchangenum option.
29
30
31       Ikeping then listens for replies, printing them as they  are  received.
32       Replies  are of exchange type 245 or the specified exchange number plus
33       1. Ikeping will keep listening until it either receives  as  many  echo
34       responses as it sent, or until the timeout period (10 seconds) has been
35       reached. Receipt of a packet will reset the timer.  The  --wait  option
36       can be used to specify a different timeout period.
37
38
39       If  the  --listen option is given, then ikeping will not send any pack‐
40       ets. Instead, it will listen for them and reply  to  each  request  re‐
41       ceived.
42
43
44       If the --natt option is given, then ikeping will set the socket to per‐
45       mit UDP encapsulated ESP packets. This is only useful in listen mode.
46
47

FILES

49       no external files
50
51

SEE ALSO

53       ping(8), ipsec_pluto(8)
54
55

BUGS

57       ipsec_pluto(8) does not support the ikeping packet yet, and  cannot  be
58       used  as  a  listener.  Therefor,  one needs to stop pluto and start an
59       ikeping in listen mode to test a remote site.
60
61

HISTORY

63       Written  for  the  Linux  FreeS/WAN  project  <http://www.freeswan.org:
64       http://www.freeswan.org> by Michael Richardson.
65
66
67
68
69                                                              IPSEC_IKEPING(8)