]> git.ipfire.org Git - thirdparty/strongswan.git/blob - doc/manpage.d/ipsec_verify.8.html
- import of strongswan-2.7.0
[thirdparty/strongswan.git] / doc / manpage.d / ipsec_verify.8.html
1 Content-type: text/html
2
3 <HTML><HEAD><TITLE>Manpage of IPSEC_VERIFY</TITLE>
4 </HEAD><BODY>
5 <H1>IPSEC_VERIFY</H1>
6 Section: Maintenance Commands (8)<BR>Updated: 8 June 2002<BR><A HREF="#index">Index</A>
7 <A HREF="http://localhost/cgi-bin/man/man2html">Return to Main Contents</A><HR>
8
9
10 <A NAME="lbAB">&nbsp;</A>
11 <H2>NAME</H2>
12
13 ipsec verify - see if FreeSWAN has been installed correctly
14 <A NAME="lbAC">&nbsp;</A>
15 <H2>SYNOPSIS</H2>
16
17 <B>ipsec</B>
18
19 <B>verify</B>
20
21 [
22 <B>--host</B>
23
24 &nbsp;name&nbsp;]
25 <A NAME="lbAD">&nbsp;</A>
26 <H2>DESCRIPTION</H2>
27
28 <P>
29
30 Invoked without argument,
31 <I>verify </I>
32
33 examines the local system for a number of common system faults:
34 IPsec not in path, no secrets file generated,
35 pluto not running, and IPsec support not present in kernel
36 (or IPsec module not loaded).
37 If two or more interfaces are found, it performs checks relevant on an
38 IPsec gateway: whether IP forwarding is allowed, and if so,
39 whether MASQ or NAT rules are in play.
40 <P>
41
42 In addition,
43 <I>verify </I>
44
45 performs checks relevant to Opportunistic Encryption.
46 It looks in forward DNS for a TXT record for the system's hostname, and
47 in reverse DNS for a TXT record for the system's IP addresses.
48 It checks whether the system has a public IP.
49 <P>
50
51 The
52 <B>--host</B>
53
54 option causes
55 <B>verify</B>
56
57 to look for a TXT record for
58 <I>name</I>
59
60 in forward and reverse DNS.
61 <A NAME="lbAE">&nbsp;</A>
62 <H2>FILES</H2>
63
64 <PRE>
65 /proc/net/ipsec_eroute
66 /etc/ipsec.secrets
67 </PRE>
68
69 <A NAME="lbAF">&nbsp;</A>
70 <H2>HISTORY</H2>
71
72 Written for the Linux FreeS/WAN project
73 &lt;<A HREF="http://www.freeswan.org">http://www.freeswan.org</A>&gt;
74 by Michael Richardson.
75 <A NAME="lbAG">&nbsp;</A>
76 <H2>BUGS</H2>
77
78 <I>Verify </I>
79
80 does not check for
81 <B>ipchains</B>
82
83 masquerading.
84 <P>
85
86 <I>Verify</I>
87
88 does not look for TXT records for Opportunistic clients behind the system.
89 <P>
90
91 <HR>
92 <A NAME="index">&nbsp;</A><H2>Index</H2>
93 <DL>
94 <DT><A HREF="#lbAB">NAME</A><DD>
95 <DT><A HREF="#lbAC">SYNOPSIS</A><DD>
96 <DT><A HREF="#lbAD">DESCRIPTION</A><DD>
97 <DT><A HREF="#lbAE">FILES</A><DD>
98 <DT><A HREF="#lbAF">HISTORY</A><DD>
99 <DT><A HREF="#lbAG">BUGS</A><DD>
100 </DL>
101 <HR>
102 This document was created by
103 <A HREF="http://localhost/cgi-bin/man/man2html">man2html</A>,
104 using the manual pages.<BR>
105 Time: 21:40:18 GMT, November 11, 2003
106 </BODY>
107 </HTML>