ssadm activate causes the Screen to begin "executing" a particular configuration that is formed when the named policy is combined with the common objects. After activation, the configuration controls the behavior of packet filtering, encryption and decryption, proxies, logging, and administrative access.
Usage:
ssadm activate [-n] [-l] policy
The table below describes the options for this command.
Table B-4 Options for activate Subcommand
Options |
Description |
---|---|
-n |
Verifies that configuration is valid; does not make it active |
-l |
Does not send the configuration to other Screens in the centralized management group, only activates it on the local Screen. |
The named policy is combined with the common objects to form a configuration.
If you omit the policy argument, ssadm activate reads a configuration file from standard input. Since the format of a configuration file is undocumented and private to the SunScreen internal software, using ssadm activate in this way is not supported.