Linux and UNIX Man Pages

Linux & Unix Commands - Search Man Pages

racoon(8) [osx man page]

RACOON(8)						    BSD System Manager's Manual 						 RACOON(8)

racoon -- IKE (ISAKMP/Oakley) key management daemon SYNOPSIS
racoon [-46BdFLv] [-f configfile] [-l logfile] DESCRIPTION
racoon is used to setup and maintain an IPSec tunnel or transport channel, between two devices, over which network traffic is conveyed securely. This security is made possible by cryptographic keys and operations on both devices. racoon relies on a standardized network pro- tocol (IKE) to automatically negotiate and manage the cryptographic keys (e.g. security associations) that are necessary for the IPSec tunnel or transport channel to function. racoon speaks the IKE (ISAKMP/Oakley) key management protocol, to establish security associations with other hosts. The SPD (Security Policy Database) in the kernel usually triggers racoon. racoon usually sends all informational messages, warnings and error messages to syslogd(8) with the facility LOG_DAEMON and the priority LOG_INFO. Debugging messages are sent with the pri- ority LOG_DEBUG. You should configure syslog.conf(5) appropriately to see these messages. -4 -6 Specify the default address family for the sockets. -B Install SA(s) from the file which is specified in racoon.conf(5). -d Increase the debug level. Multiple -d arguments will increase the debug level even more. -F Run racoon in the foreground. -f configfile Use configfile as the configuration file instead of the default. -L Include file_name:line_number:function_name in all messages. -l logfile Use logfile as the logging file instead of syslogd(8). -v This flag causes the packet dump be more verbose, with higher debugging level. racoon assumes the presence of the kernel random number device rnd(4) at /dev/urandom. RETURN VALUES
The command exits with 0 on success, and non-zero on errors. FILES
/private/etc/racoon/racoon.conf default configuration file. /private/etc/racoon/psk.txt default pre-shared key file. SEE ALSO
ipsec(4), racoon.conf(5), syslog.conf(5), setkey(8), syslogd(8) HISTORY
The racoon command first appeared in the ``YIPS'' Yokogawa IPsec implementation. SECURITY CONSIDERATIONS
The use of IKE phase 1 aggressive mode is not recommended, as described in BSD
November 20, 2000 BSD

Check Out this Related Man Page

RACOON-TOOL(8)						      System Manager's Manual						    RACOON-TOOL(8)

racoon-tool - program to manage the racoon(8) IPSEC IKE daemon. SYNOPSIS
racoon-tool [-h] reload|restart|force-reload|start|stop racoon-tool [-h] sadflush|spdflush|saddump|spddump racoon-tool [-h] vpndown|vdown|vpnup|vup connection-name|all racoon-tool [-h] vpnreload|vreload connection-name|all racoon-tool [-h] vpnlist|vlist [connection-name|all] racoon-tool [-h] vpnmenu|vmenu [connection-name-regexp] racoon-tool [-h] racoonstart|racoonstop|rstart|rstop DESCRIPTION
This manual page documents briefly the racoon-tool command. racoon-tool(8) is a perl script that can be used to control the racoon(8) IKE daemon and the SPD database within the kernel via the setkey(8) command. Various operations that it can do are described below. You can also optionally choose not to use it via reconfiguring the racoon package using dpkg-reconfigure(8). OPTIONS
A summary of options are included below. -h Show summary of options. COMMANDS
start Start racoon(8), loading any needed modules, configuring the SPD, and generating a configuration from /etc/racoon/racoon-tool.conf (head) and following up with *.conf files from /etc/racoon/racoon-tool.conf.d/. stop Stop racoon(8) unloading any crypto/IPSEC modules, flushing the SAD and SPD. reload Regenerate configuration from /etc/racoon/racoon.conf, and /etc/racoon/racoon.conf.d/, HUP racoon(8) and reinitialise the SPD and SAD. restart|force-reload Perform a stop followed by a start sadflush Flush the SAD via setkey(8). spdflush Flush the SPD via setkey(8). saddump|dump Dump the SAD to screen via setkey(8), paginating via your pager. spddump Dump the SPD to screen via setkey(8), paginating via your pager. vpnup|vup connection-name|all Bring up the VPN connection(s). vpndown|vdown connection-name|all Take down the VPN connection(s). vpnreload|vreload connection-name|all Reload the VPN connection(s). vpnlist|vlist [connection-name|all] List the known VPN connections in /etc/racoon/racoon-tool.conf, etc. Can be used by a script or administrator to see if a VPN con- nection exists. vpnmenu|vmenu [connection-name-regexp] Start the VPN menu management mode. This displays the SPD, and you can shutdown VPNs from here. Latter on support will be added for checking status and reloading the chosen connection. racoonstart|rstart Start only the racoon(8) daemon. racoonstop|rstop Stop only the racoon(8) daemon. FILES
/etc/racoon/racoon-tool.conf - configuration file (head). /etc/racoon/racoon-tool.conf.d - configuration file segment directory read after the above. /var/lib/racoon/racoon.conf - generated racoon.conf SEE ALSO
racoon(8), racoon.conf(5), setkey(8), racoon-tool.conf(5). AUTHOR
This manual page was written by Matthew Grant <>, for the Debian GNU/Linux system (but may be used by others). RACOON-TOOL(8)
Man Page