JavaScript is required to for searching.
Skip Navigation Links
Exit Print View
Oracle Solaris Administration: IP Services     Oracle Solaris 11 Information Library
search filter icon
search icon

Document Information


Part I TCP/IP Administration

1.  Planning the Network Deployment

2.  Considerations When Using IPv6 Addresses

3.  Configuring an IPv4 Network

4.  Enabling IPv6 on the Network

5.  Administering a TCP/IP Network

6.  Configuring IP Tunnels

7.  Troubleshooting Network Problems

8.  IPv4 Reference

9.  IPv6 Reference


10.  About DHCP (Overview)

11.  Administering the ISC DHCP Service

12.  Configuring and Administering the DHCP Client

13.  DHCP Commands and Files (Reference)

Part III IP Security

14.  IP Security Architecture (Overview)

Introduction to IPsec

IPsec RFCs

IPsec Terminology

IPsec Packet Flow

IPsec Security Associations

Key Management in IPsec

IPsec Protection Mechanisms

Authentication Header

Encapsulating Security Payload

Security Considerations When Using AH and ESP

Authentication and Encryption Algorithms in IPsec

Authentication Algorithms in IPsec

Encryption Algorithms in IPsec

IPsec Protection Policies

Transport and Tunnel Modes in IPsec

Virtual Private Networks and IPsec

IPsec and NAT Traversal

IPsec and SCTP

IPsec and Oracle Solaris Zones

IPsec and Logical Domains

IPsec Utilities and Files

15.  Configuring IPsec (Tasks)

16.  IP Security Architecture (Reference)

17.  Internet Key Exchange (Overview)

18.  Configuring IKE (Tasks)

19.  Internet Key Exchange (Reference)

20.  IP Filter in Oracle Solaris (Overview)

21.  IP Filter (Tasks)

Part IV Networking Performance

22.  Integrated Load Balancer Overview

23.  Configuration of Integrated Load Balancer (Tasks)

24.  Virtual Router Redundancy Protocol (Overview)

25.  VRRP Configuration (Tasks)

26.  Implementing Congestion Control

Part V IP Quality of Service (IPQoS)

27.  Introducing IPQoS (Overview)

28.  Planning for an IPQoS-Enabled Network (Tasks)

29.  Creating the IPQoS Configuration File (Tasks)

30.  Starting and Maintaining IPQoS (Tasks)

31.  Using Flow Accounting and Statistics Gathering (Tasks)

32.  IPQoS in Detail (Reference)



IPsec Utilities and Files

Table 14-3 describes the files, commands, and service identifiers that are used to configure and manage IPsec. For completeness, the table includes key management files, socket interfaces, and commands.

For more information about service identifiers, see Chapter 6, Managing Services (Overview), in Oracle Solaris Administration: Common Tasks.

Table 14-3 List of Selected IPsec Utilities and Files

IPsec Utility, File, or Service
Man Page
The SMF service that manages IPsec algorithms.
The SMF service that manages manually keyed IPsec SAs.
The SMF service that manages IPsec policy.
The SMF service for the automatic management of IPsec SAs by using IKE.
/etc/inet/ipsecinit.conf file
IPsec policy file.

The SMF policy service uses this file to configure IPsec policy at system boot.

ipsecconf command
IPsec policy command. Useful for viewing and modifying the current IPsec policy, and for testing.

Is used by the SMF policy service to configure IPsec policy at system boot.

PF_KEY socket interface
Interface for the security associations database (SADB). Handles manual key management and automatic key management.
ipseckey command
IPsec SAs keying command. ipseckey is a command-line front end to the PF_KEY interface. ipseckey can create, destroy, or modify SAs.
/etc/inet/secret/ipseckeys file
Contains manually keyed SAs.

Is used by the SMF manual-key service to configure SAs manually at system boot.

ipsecalgs command
IPsec algorithms command. Useful for viewing and modifying the list of IPsec algorithms and their properties.

Is used by the SMF ipsecalgs service to synchronize known IPsec algorithms with the kernel at system boot.

/etc/inet/ipsecalgs file
Contains the configured IPsec protocols and algorithm definitions. This file is managed by the ipsecalgs command and must never be edited manually.
/etc/inet/ike/config file
IKE configuration and policy file. By default, this file does not exist. The management is based on rules and global parameters in the /etc/inet/ike/config file. See IKE Utilities and Files.

If this file exists, the svc:/network/ipsec/ike service starts the IKE daemon, in.iked, to provide automatic key management.