Securing the Network in Oracle® Solaris 11.2

Exit Print View

Updated: August 2014
 
 

IKEv1 Service

The Service Management Facility (SMF) provides the svc:/network/ipsec/ike:default service to manage IKEv1. By default, this service is disabled. Before enabling this service, you must create an IKEv1 configuration file, /etc/inet/ike/config.

    The following ike service properties are configurable:

  • config_file property – Sets the location of the IKEv1 configuration file. The initial value is /etc/inet/ike/config.

  • debug_level property – Sets the debugging level of the in.iked daemon. The initial value is op, or operational. For possible values, see the table on debug levels under Object Types in the ikeadm(1M) man page.

  • admin_privilege property – Sets the level of privilege of the in.iked daemon. The initial value is base. Other values are modkeys and keymat. For details, see IKEv1 ikeadm Command.

For information about SMF, see Chapter 1, Introduction to the Service Management Facility, in Managing System Services in Oracle Solaris 11.2 . Also see the smf(5), svcadm(1M), and svccfg(1M) man pages.