RACOON(8) | System Manager's Manual | RACOON(8) |
racoon
— IKE
(ISAKMP/Oakley) key management daemon
racoon |
[-46BdFLVv ]
[-f configfile]
[-l logfile]
[-P isakmp-natt-port]
[-p isakmp-port] |
racoon
speaks the IKE (ISAKMP/Oakley) key
management protocol, to establish security associations with other hosts.
The SPD (Security Policy Database) in the kernel usually triggers
racoon
. racoon
usually sends
all informational messages, warnings and error messages to
syslogd(8) with the facility
LOG_DAEMON
and the priority
LOG_INFO
. Debugging messages are sent with the
priority LOG_DEBUG
. You should configure
syslog.conf(5)
appropriately to see these messages.
-4
-6
-B
-d
-d
arguments
will increase the debug level even more.-F
racoon
in the foreground.-f
configfile-L
-l
logfile-P
isakmp-natt-port-p
isakmp-port-V
-v
racoon
assumes the presence of the kernel
random number device rnd(4) at
/dev/urandom.
The command exits with 0 on success, and non-zero on errors.
ipsec(4), racoon.conf(5), syslog.conf(5), setkey(8), syslogd(8)
The racoon
command first appeared in the
“YIPS” Yokogawa IPsec implementation.
The use of IKE phase 1 aggressive mode is not recommended, as described in http://www.kb.cert.org/vuls/id/886601.
January 23, 2009 | NetBSD 10.99 |