110 lines
2.7 KiB
Plaintext
110 lines
2.7 KiB
Plaintext
.TH IPSEC_TNCFG 5 "27 Jun 2000"
|
|
.\"
|
|
.\" RCSID $Id: tncfg.5,v 1.1 2004/03/15 20:35:31 as Exp $
|
|
.\"
|
|
.SH NAME
|
|
ipsec_tncfg \- lists IPSEC virtual interfaces attached to real interfaces
|
|
.SH SYNOPSIS
|
|
.B ipsec
|
|
.B tncfg
|
|
.PP
|
|
.B cat
|
|
.B /proc/net/ipsec_tncfg
|
|
.SH DESCRIPTION
|
|
.I /proc/net/ipsec_tncfg
|
|
is a read-only file which lists which IPSEC virtual interfaces are
|
|
attached to which real interfaces, through which packets will be
|
|
forwarded once processed by IPSEC.
|
|
.PP
|
|
Each line lists one ipsec I/F.
|
|
A table entry consists of:
|
|
.IP + 3
|
|
an ipsec virtual I/F name
|
|
.IP +
|
|
a visual and machine parsable separator '->', separating the virtual I/F
|
|
and the physical I/F,
|
|
.IP +
|
|
a physical I/F name, to which the ipsec virtual I/F is attached or NULL
|
|
if it is not attached,
|
|
.IP +
|
|
the keyword
|
|
.BR mtu= ,
|
|
.IP +
|
|
the MTU of the ipsec virtual I/F,
|
|
.IP +
|
|
the automatically adjusted effective MTU for PMTU discovery, in brackets,
|
|
.IP +
|
|
a visual and machine parsable separator '->', separating the virtual I/F
|
|
MTU and the physical I/F MTU,
|
|
.IP +
|
|
the MTU of the attached physical I/F.
|
|
.BR
|
|
.SH EXAMPLES
|
|
.TP
|
|
.B ipsec2 -> eth3 mtu=16260(1443) -> 1500
|
|
.LP
|
|
shows that virtual device
|
|
.B ipsec2
|
|
with an MTU of
|
|
.B 16260
|
|
is connected to physical device
|
|
.B eth3
|
|
with an MTU of
|
|
.B 1500
|
|
and that the effective MTU as a result of PMTU discovery has been
|
|
automatically set to
|
|
.BR 1443.
|
|
.TP
|
|
.B ipsec0 \-> wvlan0 mtu=1400(16260) \-> 1500
|
|
.LP
|
|
shows that virtual device
|
|
.B ipsec0
|
|
with an MTU of
|
|
.B 1400
|
|
is connected to physical device
|
|
.B wvlan0
|
|
with an MTU of
|
|
.B 1500
|
|
and no PMTU packets have gotten far enough to bump down the effective MTU
|
|
from its default of 16260.
|
|
.TP
|
|
.B ipsec3 \-> NULL mtu=0(0) \-> 0
|
|
.LP
|
|
shows that virtual device
|
|
.B ipsec3
|
|
is not connected to any physical device.
|
|
.LP
|
|
.SH "FILES"
|
|
/proc/net/ipsec_tncfg, /usr/local/bin/ipsec
|
|
.SH "SEE ALSO"
|
|
ipsec(8), ipsec_manual(8), ipsec_eroute(5), ipsec_spi(5),
|
|
ipsec_spigrp(5), ipsec_klipsdebug(5), ipsec_tncfg(8), ipsec_version(5),
|
|
ipsec_pf_key(5)
|
|
.SH HISTORY
|
|
Written for the Linux FreeS/WAN project
|
|
<http://www.freeswan.org/>
|
|
by Richard Guy Briggs.
|
|
.\"
|
|
.\" $Log: tncfg.5,v $
|
|
.\" Revision 1.1 2004/03/15 20:35:31 as
|
|
.\" added files from freeswan-2.04-x509-1.5.3
|
|
.\"
|
|
.\" Revision 1.5 2002/04/24 07:35:41 mcr
|
|
.\" Moved from ./klips/utils/tncfg.5,v
|
|
.\"
|
|
.\" Revision 1.4 2001/05/29 05:15:53 rgb
|
|
.\" Added PMTU to output format.
|
|
.\"
|
|
.\" Revision 1.3 2000/06/30 18:21:55 rgb
|
|
.\" Update SEE ALSO sections to include ipsec_version(5) and ipsec_pf_key(5)
|
|
.\" and correct FILES sections to no longer refer to /dev/ipsec which has
|
|
.\" been removed since PF_KEY does not use it.
|
|
.\"
|
|
.\" Revision 1.2 2000/06/28 12:44:12 henry
|
|
.\" format touchup
|
|
.\"
|
|
.\" Revision 1.1 2000/06/28 05:43:01 rgb
|
|
.\" Added manpages for all 5 klips utils.
|
|
.\"
|
|
.\"
|