ISAKMPD(8)              OpenBSD System Manager's Manual             ISAKMPD(8)

NAME
     isakmpd - ISAKMP/Oakley aka IKE key management daemon

SYNOPSIS
     isakmpd [-c config-file] [-d] [-D debug-class=level] [-f fifo] [-n] [-p
             listen-port] [-P local-port] [-r seed] [-R report-file]

DESCRIPTION
     The isakmpd daemon establishes security associations for encrypted and/or
     authenticated network traffic.

     The daemon listens to a named pipe isakmpd.fifo for user requests and on
     a PF_ENCAP socket for kernel requests.

     The options are as follows:

     -c config-file
             Specifies an alternate configuration file instead of the default
             /etc/isakmpd/isakmpd.conf.

     -d      Cause the daemon run in the foreground, logging to stderr.

     -D debug-class=level
             This argument is possible to specify many times.  It takes a pa-
             rameter of the form class=level where both class and level are
             numbers.  class denotes a debugging class, and level the level
             you want that debugging class to limit debug printouts at (i.e.,
             all debug printouts above the level specified will not output
             anything). If class is set to `A', then all debugging classes are
             set to the specified level.

     -f fifo
             Specifies the FIFO (a.k.a. named pipe) where the daemon listens
             for user requests.  If the path given is a dash (`-'), isakmpd
             will listen to stdin instead.

     -n      Cause the kernel to not take part in the negotiations.  This is a
             non-destructive mode so to say, in that it won't alter any SAs in
             the IPsec stack.

     -p listen-port
             Specifies the port isakmpd will bind to.

     -P local-port
             On the other hand, the port specified to capital -P will be what
             the daemon binds its local end to when acting as initiator.

     -r seed
             If given a deterministic random number sequence will be used in-
             ternally.  This is useful for setting up regression tests.

     -R report-file
             When you signal isakmpd a SIGUSR1 it will report its internal
             state to a report file, normally /var/run/isakmpd.report, but
             this can be changed by feeding the file name as an argument to
             the -R flag.

BUGS
     The -P flag does not do what we document, rather it does nothing.

FILES



     /etc/isakmpd/isakmpd.conf  configuration file
     /var/run/isakmpd.fifo      FIFO used to manually control isakmpd
     /var/run/isakmpd.report    report file

SEE ALSO
     ipsec(4),  isakmpd.conf(5),  photurisd(8)

HISTORY
     The ISAKMP/Oakley key management protocol is described in the RFCs RFC
     2407, RFC 2408 and RFC 2409. This implementation was done 1998 by Niklas
     Hallqvist and Niels Provos, sponsored by Ericsson Radio Systems.

OpenBSD 2.6                      July 31, 1998                               2
