summaryrefslogtreecommitdiff
path: root/sbin/ipsecctl/ipsecctl.8
blob: ee36676732b127b53f3b18d97538df1bf8da0609 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
.\"	$OpenBSD: ipsecctl.8,v 1.4 2005/04/05 07:14:00 jmc Exp $
.\"
.\" The following requests are required for all man pages.
.Dd April 5, 2005
.Dt IPSECCTL 8
.Os
.Sh NAME
.Nm ipsecctl
.Nd control flows for IPsec
.Sh SYNOPSIS
.\" For a program:  program [-abc] file ...
.Nm ipsecctl
.Op Fl Fhnsv
.Op Fl f Ar file
.Sh DESCRIPTION
The
.Nm
utility controls flows that determine which packets are to be processed by
IPsec.
It allows ruleset configuration and retrieval of status information from the
kernel's SPD (Security Policy Database).
.Pp
The ruleset grammar is described in
.Xr ipsec.conf 5 .
.Pp
The options are as follows:
.Bl -tag -width Ds
.It Fl F
The
.Fl F
option flushes the SPD.
.It Fl f Ar file
Load the rules contained in
.Ar file .
.It Fl h
Help.
.It Fl n
Do not actually load rules, just parse them.
.It Fl s
Show the ruleset loaded into the SPD.
.It Fl v
Produce more verbose output.
A second use of
.Fl v
will produce even more verbose output.
.El
.\" The following requests should be uncommented and used where appropriate.
.\" This next request is for sections 2, 3, and 9 function return values only.
.\" .Sh RETURN VALUES
.\" This next request is for sections 1, 6, 7 & 8 only.
.\" .Sh ENVIRONMENT
.\" .Sh FILES
.\" .Sh EXAMPLES
.\" This next request is for sections 1, 4, 6, and 8 only.
.\" .Sh DIAGNOSTICS
.\" The next request is for sections 2, 3, and 9 error and signal handling only.
.\" .Sh ERRORS
.\" .Sh SEE ALSO
.\" .Xr foobar 1
.\" .Sh STANDARDS
.\" .Sh HISTORY
.\" .Sh AUTHORS
.\" .Sh CAVEATS
.\" .Sh BUGS