ipsec-ondemand8
Add and route a connection
Usage
ipsec ondemand
connection
[--config
/etc/ipsec.conf]
[--ctlsocket
/run/pluto/pluto.ctl]
[--dry-run]
Overview
ipsec ondemand is equivalent to running ipsec add connection followed by ipsec route connection , having the same effect as the connection configuration option auto=route or auto=ondemand. This sets up connection to be on demand, causing connection to establish only when triggered by outbound traffic.
Note: you might also need to run ipsec rereadsecrets when your new connection uses pre-shared key (PSK) authentication, authby=secret because secrets keys are only being read at startup.
With --dry-run the underlying whack or addconn command is displayed but not executed.
See also
ipsec.conf(5)
IPsec configuration and connections
ipsec(8)
invoke IPsec utilities
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-algparse(8)
utility for verifying IKE and IPsec cryptographic proposal syntax
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-checknss(8)
Check or initialize the IPsec NSS database
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-ecdsasigkey(8)
generate ECDSA signature key
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-letsencrypt(8)
invoke Opportunistic Encryption utilities
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-newhostkey(8)
generate a new raw RSA authentication key for a host
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-pluto(8)
Internet Key Exchange daemon
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-route(8)
Add and route a connection
ipsec-rsasigkey(8)
generate RSA signature key
ipsec-setup(8)
wrapper routine to the Libreswan init system
ipsec-showhostkey(8)
show host's authentication key
ipsec-showroute(8)
show route to given address
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-start(8)
Add, route, and up a connection
ipsec-status(8)
Show connection status
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-unroute(8)
unroute a connection
ipsec-up(8)
Establish a connection
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-whack(8)
ipsec whack : IPsec IKE keying daemon low-level control interface
Referred to by
ipsec-up(8)
Establish a connection
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-route(8)
Add and route a connection
ipsec-start(8)
Add, route, and up a connection
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-status(8)
Show connection status
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-unroute(8)
unroute a connection
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-checknss(8)
Check or initialize the IPsec NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service