Black Box ACS120 Podręcznik Użytkownika Pobierz pdf (Strona 385)

100

101

Appendix G - IPSEC

User Guide 385

Starting and Stopping a Connection

All the connections can be negotiated at boot time if these connections have the auto param-

eter set to start. However if a certain connection doesn't have this option set you can set it.

Once a connection descriptor is in the IPsec internal database, you can start its negotiation

using the command:

/usr/local/sbin/ipsec auto --up <connection name>

Similarly to close a tunnel you use the command:

/usr/local/sbin/ipsec auto --up <connection name>

Below you can see the output of a successful up operation:

[root@henrique root]# ipsec auto --up teste

104 "teste" #5: STATE_MAIN_I1: initiate

106 "teste" #5: STATE_MAIN_I2: sent MI2, expecting MR2

108 "teste" #5: STATE_MAIN_I3: sent MI3, expecting MR3

004 "teste" #5: STATE_MAIN_I4: ISAKMP SA established

112 "teste" #6: STATE_QUICK_I1: initiate

004 "teste" #6: STATE_QUICK_I2: sent QI2, IPsec SA established

Generating the RSA key pair

To build a connection, the Console Server and the other end must be able to authenticate

each other. For IPsec, the default is public key authentication based on the RSA algorithm.

1 2 ... 380 381 382 383 384 385 386 387 388 389 390 ... 449 450

Komentarze do niniejszej Instrukcji

Brak uwag

Black Box ACS120 Podręcznik Użytkownika Strona 385

Komentarze do niniejszej Instrukcji