xref: /illumos-gate/usr/src/cmd/cmd-inet/etc/default/ipsec.dfl (revision a787240632bcb1404b9fd4583516b875d3f02c8b)
1*a7872406Smeem#
2*a7872406Smeem# Copyright 2005 Sun Microsystems, Inc.  All rights reserved.
3*a7872406Smeem# Use is subject to license terms.
4*a7872406Smeem#
5*a7872406Smeem# CDDL HEADER START
6*a7872406Smeem#
7*a7872406Smeem# The contents of this file are subject to the terms of the
8*a7872406Smeem# Common Development and Distribution License, Version 1.0 only
9*a7872406Smeem# (the "License").  You may not use this file except in compliance
10*a7872406Smeem# with the License.
11*a7872406Smeem#
12*a7872406Smeem# You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
13*a7872406Smeem# or http://www.opensolaris.org/os/licensing.
14*a7872406Smeem# See the License for the specific language governing permissions
15*a7872406Smeem# and limitations under the License.
16*a7872406Smeem#
17*a7872406Smeem# When distributing Covered Code, include this CDDL HEADER in each
18*a7872406Smeem# file and include the License file at usr/src/OPENSOLARIS.LICENSE.
19*a7872406Smeem# If applicable, add the following below this CDDL HEADER, with the
20*a7872406Smeem# fields enclosed by brackets "[]" replaced with your own identifying
21*a7872406Smeem# information: Portions Copyright [yyyy] [name of copyright owner]
22*a7872406Smeem#
23*a7872406Smeem# CDDL HEADER END
24*a7872406Smeem#
25*a7872406Smeem# ident	"%Z%%M%	%I%	%E% SMI"
26*a7872406Smeem#
27*a7872406Smeem# IKE CONFIGURATION:
28*a7872406Smeem# This file is read once by each in.iked process.
29*a7872406Smeem#
30*a7872406Smeem# IKE_CONFIG defines the default IKE config file pathname.  By default, it
31*a7872406Smeem# is /etc/inet/ike/config
32*a7872406Smeem#IKE_CONFIG=/etc/inet/ike/config
33*a7872406Smeem#
34*a7872406Smeem# IKE_DEBUG sets the initial debug level within the IKE daemon; by default,
35*a7872406Smeem# no debug messages are logged.
36*a7872406Smeem#IKE_DEBUG=
37*a7872406Smeem#
38*a7872406Smeem# IKE_DEBUG_FILE controls where IKE debug output goes if enabled.  By default,
39*a7872406Smeem# it goes to stderr (the console, when started at boot time, which is usually
40*a7872406Smeem# not what you want)
41*a7872406Smeem#IKE_DEBUG_FILE=
42*a7872406Smeem#
43*a7872406Smeem# IKE_ADM_PRIV sets the ikeadm "privilege level", which determines how
44*a7872406Smeem# much ikeadm is allowed to control while in.iked is running.
45*a7872406Smeem# Possible values are:
46*a7872406Smeem#		base			ikeadm may not change keys
47*a7872406Smeem# 		modkeys			ikeadm may set keys.
48*a7872406Smeem#		keymat			ikeadm may set and get keys.
49*a7872406Smeem#IKE_ADM_PRIV=base
50*a7872406Smeem
51*a7872406Smeem
52*a7872406Smeem
53