ipsec-route8
Add and route a connection
Usage
ipsec route
connection
[--config
/etc/ipsec.conf]
[--ctlsocket
/run/pluto/pluto.ctl]
Overview
ipsec route changes previously added connection to routed state. This cause pluto to add necessary IPsec policies and routes on system to cause connection to be on demand, causing connection to establish only when triggered by outbound traffic.
If you want to add and route a connection you can just run ipsec ondemand connection.
See also
ipsec.conf(5)
IPsec configuration and connections
ipsec(8)
invoke IPsec utilities
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-algparse(8)
utility for verifying IKE and IPsec cryptographic proposal syntax
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-checknss(8)
Check or initialize the IPsec NSS database
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-ecdsasigkey(8)
generate ECDSA signature key
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-letsencrypt(8)
invoke Opportunistic Encryption utilities
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-newhostkey(8)
generate a new raw RSA authentication key for a host
ipsec-ondemand(8)
Add and route a connection
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-pluto(8)
Internet Key Exchange daemon
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-start(8)
Add, route, and up a connection
ipsec-status(8)
Show connection status
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-unroute(8)
unroute a connection
ipsec-up(8)
Establish a connection
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-whack(8)
ipsec whack : IPsec IKE keying daemon low-level control interface
Referred to by
ipsec-up(8)
Establish a connection
ipsec-add(8)
Add a connection specification to pluto internal database from /etc/ipsec.conf
ipsec-down(8)
Down all tunnels sharing same IPsec connection.
ipsec-stop(8)
Stop the ipsec service via initsystem
ipsec-start(8)
Add, route, and up a connection
ipsec-delete(8)
Delete a connection definition from IPsec service
ipsec-import(8)
Import PKCS#12 (*.p12) files into the IPsec NSS database
ipsec-listen(8)
Force pluto to re-listen all interfaces
ipsec-status(8)
Show connection status
ipsec-crlutil(8)
Helper to run NSS crlutil on IPsec NSS database
ipsec-initnss(8)
Initialise the IPsec NSS database
ipsec-listall(8)
List all public key information from IPsec daemon (pluto)
ipsec-modutil(8)
Helper to run NSS modutil on IPsec NSS database
ipsec-replace(8)
Replace a connection definition with one from /etc/ipsec.conf
ipsec-restart(8)
Restart the ipsec service via initsystem
ipsec-unroute(8)
unroute a connection
ipsec-certutil(8)
Helper to run NSS certutil on IPsec NSS database
ipsec-checknss(8)
Check or initialize the IPsec NSS database
ipsec-listcrls(8)
List X.509 certificates revocation lists from NSS database
ipsec-ondemand(8)
Add and route a connection
ipsec-pk12util(8)
Helper to run NSS pk12util on IPsec NSS database
ipsec-redirect(8)
Redirect a connection definition with one from /etc/ipsec.conf.
ipsec-vfychain(8)
Helper to run NSS vfychain on IPsec NSS database
ipsec-fetchcrls(8)
Signal IPsec daemon to fetch new certificate revocation lists.
ipsec-listcerts(8)
List X.509 certificates loaded from NSS database
ipsec-purgeocsp(8)
Purgeocsp purges the NSS OCSP cache.
ipsec-rereadall(8)
Reread IPsec secrets and certificates.
ipsec-checknflog(8)
Initialise nftables or iptables rules for the nflog devices
ipsec-fipsstatus(8)
Show IPsec daemon (pluto) FIPS status
ipsec-showstates(8)
Show current IKE SA and Child SA states
ipsec-briefstatus(8)
Get brief status from IPsec service
ipsec-checkconfig(8)
Validate ipsec configuration file, /etc/ipsec.conf
ipsec-listcacerts(8)
List x.509 Certificate Authority (CA) certificates
ipsec-listpubkeys(8)
List all public keys from pluto internal database.
ipsec-rereadcerts(8)
Reread IPsec certificates from IPsec NSS database
ipsec-shuntstatus(8)
Show current IPsec negotiation shunts
ipsec-globalstatus(8)
Get global status information from IPsec daemon (pluto)
ipsec-rereadsecrets(8)
Reread IPsec secrets from /etc/ipsec.secrets.
ipsec-trafficstatus(8)
Show current Child SA states with traffic counters
ipsec-connectionstatus(8)
Get brief status from IPsec service
ipsec-briefconnectionstatus(8)
Get brief connection status from IPsec service
libreswan(7)
Internet Key Exchange (IKE) Manager for IPsec